last executing test programs: 6m10.50736791s ago: executing program 4 (id=71): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_ADT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) 6m10.178205734s ago: executing program 4 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x7f, 0x7, {{0x11, 0x4, 0x0, 0x3, 0x44, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x27, 0x4e, [@empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @local, @rand_addr=0x64010102, @broadcast]}, @timestamp={0x44, 0x4, 0x99, 0x0, 0x7}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@getchain={0x5c, 0x66, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x1}, {0x10, 0x10}, {0xffff, 0xffff}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc1c}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad386dd", 0x4, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r6, 0x1, 0xdb, 0x6, @random="98c8ca7122df"}, 0x14) (async) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000580)={r10}) (async, rerun: 64) r11 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 32) listen(r11, 0x0) (async, rerun: 32) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) accept4(r11, 0x0, 0x0, 0x0) 6m10.119538431s ago: executing program 1 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f0000000000)) 6m10.069897889s ago: executing program 1 (id=78): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 6m9.919213157s ago: executing program 1 (id=80): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1f1441, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc0000001b0089fd0000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000000000000000000200206000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000c0008000800080000000000890ce1384282f9b7a4eb11bbb1747daf3af51d07f7860c70e6660985e9ff59220c8379cbba0d22ba1c198102eaa81479e845bd0b9f2dfcf96ca9ad06b9cf55499feb66c4dd60ce08ab2e984369e81ba0f1724d6d9848b3a05ffbd2b02f62c6a2f56f8fcd9e9d172f46f5b9ea"], 0xcc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 6m9.899912539s ago: executing program 4 (id=81): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0xfa, 0x6, 0x7ff, 0x1c, @mcast2, @empty, 0x80, 0x8000, 0x4563}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x460b53bc, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620095000000000008000000cf09468ba5dabf1613a7eaf8817c06f12028d03fb188bd9f7d3a652ddfbf267bd78d1e133870238191965dce05a94eeab2776a0152d5e4b8f324915283daffcfcd7c510d51ef75582389a8b51f3d34cb7110c22c3ef03d49b103e77098783c8f5378683e8605bba4f1cf79010d77cfb8fc9924596bf91651d4d890501de1f56c6807503f7e5fce7ded50a49a6d7a9352b9d0c8131558a43429609f27c06d974a385be6c29a1e073930f8ca091ae275176cce3fc0d59a0a5a7a7856b25755d5ff6c97b0f747f07f1884c59c2b3c4ed91e"], &(0x7f0000000480)='GPL\x00'}, 0x90) 6m9.867770626s ago: executing program 2 (id=82): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) getsockopt$inet_buf(r0, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) sendto(r0, &(0x7f0000000080)="0fc8651edec9fb4aac3cbe47ef9db0789a993821924aebd0e3be0d857c3f12795b517a78a4c64cb7911025ff6362a62e813d8cf7f0e12ed89198b2f13f3e36fa8aad8dd4aaa63742268ec2dd01908393b47994cb4fd07655e38f4c0fe0fa412da9a2b9855834e362f19407a6f002a78fa8f2587bb93dffbde7b443f519890514a2ad4dd8d5fd0b4493f2f6b8df1f4b7c207704e4b38ad8e1d6a31d85f1d6a06b97c299af1422ab50427dbb272c06babc41efc92419c9f24e743752ac36f6297248960c6bb7b924705039de3048c90d76cf6c4edd4c0a1a3e1130d73d", 0xdc, 0x2400c8c0, &(0x7f0000000200)=@x25, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000003000000000200000002d3f185896389ad7000000000000000000000000000000b03000000000000000000"], 0x0, 0x4a}, 0x20) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x100000) 6m9.795321772s ago: executing program 0 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a000300080018004e244e2114000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000040}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) unshare(0x26020480) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b50000000000000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x6}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffa6, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000200)="400001", 0x3}], 0x2}}], 0x1, 0x4404c880) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) sendto$inet6(r6, &(0x7f0000000740)="6eba4632ada130586e022e61", 0xc, 0x43304, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x804) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0x1, 0x1, 0x1a, r5, 0x2}, 0xc) r9 = socket(0x22, 0x3, 0x0) bind$vsock_stream(r9, &(0x7f0000000740), 0x10) socket(0x2e, 0x2, 0xf3) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 6m9.733434638s ago: executing program 4 (id=84): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESDEC=r1, @ANYBLOB="1b584030949046298f2ca5012972576e2a77d71dd7ca36f44fe475de7c91de50253ded7a2b1f7c05fcac290a48c32f9d25ccb703b76b6cbd0e788f5cbaee9ca8"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20044881) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x30845aa81b581fea) recvfrom$l2tp6(r1, &(0x7f00000001c0)=""/118, 0x76, 0x22, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000100001045e9576a86a80fe", @ANYRES32=r8, @ANYBLOB="03150000040000000a0001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40810) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r11, 0x29, 0x6, 0x7, 0x8, 0x51, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, 0x40, 0x700, 0x6, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xd}, {0x2, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x2c}}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) socket$netlink(0x10, 0x3, 0x0) 6m9.711390364s ago: executing program 2 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a1b04396355865dd0e63c348000000100401f7c0c45d72e1d519edc314db6090103604ca72fe8b07766bd6424d74ac32481ef1d2dcd136ef26b0aba1afb744f977cb8538d144fd4a2de5d1a9986676e65e71bddce8638341740d589c12dac0c3f72674d5d2736a82bee30567450e3a1bc8cd6aa29bc5caf79cd6acf02d77d92128b7432afc63", @ANYRESHEX=r0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xa2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x20054004) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x1, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x101, 0x0, 0x5}, "0fdf77"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x168, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc17b}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}\\,\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x64, 0x4, "9d7e1933b2086df554a01da9a4262fb111615130dc904d55c0a070df768739ace4a252add23e45a06fd21d1461a230435c8b9b0d49ffead1e144ac9217d6eb5097f0160d87aadd7490085e74bc207c26bb803ec941ac42d8dd5e15194b048d2a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m9.627436175s ago: executing program 1 (id=86): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) 6m9.627028662s ago: executing program 3 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) 6m9.575704446s ago: executing program 0 (id=88): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x849f, 0x51}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x849f, 0x51}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 6m9.470610336s ago: executing program 1 (id=89): r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/107, 0x6b}], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000540)="910f5d2b854b9fe30a64797b6e937d091dfcffedf3370aa6a986b459a60ba572ef95d37da9b869ebdea6a1bc843086cbe4115e85c05d87635bd7801e750155260b565667dcbbdcfb34249d61419efa71b245a6479a58d59e01853d22e8c1e90d9750d8b7ade24cd41318658bee7f6a6c30edb25beb6d75ce222945406f6a0a57c7c4490be01cc60f5dc85c698931f96d744480b932adbcdcec", 0x99}], 0x1) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="a428aa28c1d0843d353c8c8c9fa72970576069e2790a41e422a0f4cb7c45d77aacdd6848d15afa61c092ff642b39e5a1f205d7c7da426f01a10e21ef329c7a917bacb6197af7e7955c31d010e6e2cb907ee9ed2762919e033409d3a5227fdf9a5c92384cbbdb4969f9bb6293e142905cee57c71bcec02b7fc036e72194cc823c8d72161f8f89847c41890b5d1fb6014e1e0800af445d60b371c7bd04e6fe94ae1c52eab30d0909187405243a304d4d0ac2c464645ca37f4c8a5e6a9fb7911ac8", 0xc0}], 0x1, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}], 0x18}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, r4, 0x4000) r5 = socket(0x14, 0x80000, 0xf) ioctl$SIOCX25GDTEFACILITIES(r5, 0x61d9, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2c, &(0x7f00000001c0)=0x800, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000500)={0x1}, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0xf, 0x0, "f5cc0bab3b8791011ad228e29e8ca580bb08594eca43551925409fe0b1a2ccd41c022a4ce8c7a7d73eeda2e151ff158b8d8095aff5fae0173f68a5e39aaef9978f9d6121550d2b4461aa1efcdf0c24ae"}, 0xd8) 6m9.398646834s ago: executing program 3 (id=90): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c00)={0x36c, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xbc, 0x2a, [@chsw_timing={0x68, 0x4, {0xf, 0x2}}, @measure_req={0x26, 0x3c, {0x1, 0x7, 0x3, "1ae7cdf96696dd717923bc165df45917c227dbc33267ae2cb689a61bfb5a4b827bb03f0fa28b548ad9a7c6369238dbc627f673f8e12de3d647"}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x6}}, @random_vendor={0xdd, 0x3f, "41a7c66e6dbd9eca75b58144e9379f249a923af42367995c7812067eeb393a6ef1ce316ef552a72339886973942f9c6dc507db3569221d37085568bd230cb6"}, @mic={0x8c, 0x10, {0x7f5, "bd0219653ebc", @short="798428d3c82192a6"}}, @chsw_timing={0x68, 0x4, {0x81, 0xf}}, @mic={0x8c, 0x10, {0x1e7, "f46755263aef", @short="d7961e90f3d397c9"}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x23c, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1d, 0x3, "fb4029b299ed58aa3c5eef328bcbb4a2991021382c059bdae0"}, @NL80211_BAND_2GHZ={0xfd, 0x0, "18a2a38e2474d7e3e8a30cda7f787f41e71f37d2db09eb53d758569b00597926fb444d61be2ef6123ef16ee775e45443568d9e126bf364d8a486ade850f743ff1c8db44cadf05e920a0418445be2efd020bbaa61f5d858baede8ffe00e40710a539bdd2a98d5f6ea6f53dbf07e3c6e6037eb565401402fbd89fb36e0c08e9310e5397d8e2fe2a309c059b37c31a157b451d1d506c65de1364ccf04cc952ad41534d84f56d59d46e6de54cb4a30e8ae9fa57ec4d1938524cc6816011749fa96797f88a8bbdddccd3b3536d9b1febccf334d2ff50265296ac61003cc71be6235edaf13aa746601b20759283b50c896cd38a8d7135bf3ac28e804"}, @NL80211_BAND_2GHZ={0x47, 0x0, "81c5c3115cec55cfec86f910a4dff061946192212e862979994532f4342de26fb9c3239110a98d4df679705e842b1fce9e419ce609b86bc068379588e24762a7fdee39"}, @NL80211_BAND_5GHZ={0xcf, 0x1, "6e81f7270b0d0da0f376a4767489b390f9b931cfcd01feea2b6c3d251235e7fa454173d987d57703432f6204200bcdd718522a23a36d9282c297c2a260d96a72ef10a2f783d00f823a15d8afc1a48d6764ba338961db10801137775f5d804531201506e66cc56c7cdba2450cf49f13fb67223d02e9558240d999a22c6beffe36d3e7023b52b8ec64abee7dfb63001656a4a8cb094e6c81d60f8298181f9c32c02ece27d928bcd2f63dfa0d68fa7ca5e4b7172b54b6065294b0b3258ce01b80f10a97eff48e1732e6f8a578"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x53, 0x2a, [@tim={0x5, 0x35, {0x9, 0xbf, 0x2, "037c2417fb8a8867225a62e89a81c698a3a5c46ba49584ba6e13164996ff5affe5fed4c8ab23d9c8efdd0725429704c9eb4c"}}, @peer_mgmt={0x75, 0x16, {0x0, 0x8000, @val, @void, @val="902132171e0bc9863a9f08f8b0e81061"}}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x11}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @remote}, &(0x7f0000000100)=0xc) r9 = accept(r0, 0x0, &(0x7f0000000ac0)) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000b00)={0xffffffffffffffff, r0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1c, r8, 0x4}, 0x19) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r11, 0xb08, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) pipe(&(0x7f0000000000)) 6m9.397670263s ago: executing program 0 (id=91): r0 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x128, 0x65, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_MASK={0x8, 0x6, 0x7ff}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x181d6}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x3}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x9c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0x7}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x84, 0x1, [@m_simple={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "e806000000dc493fe8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x44, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x13, 0x6, "6ce70dee9964d94e2b0cbf2aec388b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$inet6(r0, &(0x7f0000000500)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x400, 0x8000000, @loopback}, 0x1c) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000004, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x128, 0x65, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_MASK={0x8, 0x6, 0x7ff}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x181d6}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x3}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x9c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0x7}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x84, 0x1, [@m_simple={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "e806000000dc493fe8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x44, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x13, 0x6, "6ce70dee9964d94e2b0cbf2aec388b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) (async) socket(0x10, 0x803, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) sendto$inet6(r0, &(0x7f0000000500)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x400, 0x8000000, @loopback}, 0x1c) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x40000004, 0x0, 0x0) (async) 6m9.244786002s ago: executing program 3 (id=92): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(r0, &(0x7f0000003000), 0x0, 0x818) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000ba1044e41aaf8e8e762213b7d3000000ffffffff1414aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x2, r5, 0x29, r3}, 0x10) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c0000001200010300007b9afec6f45db9b3000000000000000700054e2300000000000000000000810000000000000096f901eff91af6", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfedeff"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x891e, 0x0) unshare(0x300) unshare(0x6020400) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r8, 0x0, 0x9, 0xb9a, 0x5, 0xcf2}, &(0x7f00000000c0)=0x14) 6m9.137427188s ago: executing program 0 (id=93): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x4, 0x0, 0xd}) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='pimreg\x00', 0x7) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x114, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xe4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x965}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x105}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x800}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffff9}]}}]}, 0x114}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed}, 0x8) bind$bt_sco(r5, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000240)=0x5, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'pimreg\x00'}) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x2, 0x9b}, &(0x7f0000000340)=0xc) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 6m9.02755713s ago: executing program 2 (id=94): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0x3, @loopback, 0x7}}}, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000200d7000c008f0000000000000c009000fdffffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 6m8.943794271s ago: executing program 3 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) r4 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) (async) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) (async) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 6m8.856919463s ago: executing program 2 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) 6m8.731290951s ago: executing program 0 (id=97): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x8840) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000140), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140d, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40004) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x19, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x148}}, 0x0) 6m8.60295509s ago: executing program 4 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$kcm(0xa, 0x922000000003, 0x11) (async) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000001200)=ANY=[@ANYRES32=r4, @ANYBLOB="090000b53400"]) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000001200)=ANY=[@ANYRES32=r4, @ANYBLOB="090000b53400"]) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) 6m8.581215044s ago: executing program 3 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa452}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7457ff8f99b8233ba7d81496e1da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8a60986e62603a0d}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000408010800000000010000800300000a0900010073797a31000000000900010073797a3100000000090027001df143f842360504010073797a31000000008d9b77275253adf20a134229ccffd2c8b510f400d0117f70c7c6bb72ee4c1802e17a414cccf46b94a2cbd0de3caea9881403643d5d2e625db81ba82714ced5a0f83689929bebf06dd1dc3022f86098244dd54215940e1cc692e5622caafb5cfcd271e0857d1c72e1111db30d83477d5d71badb117bfe30b37dabe1a9"], 0x38}, 0x1, 0x0, 0x0, 0x8000010}, 0x841) 6m8.515464943s ago: executing program 2 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000100)="ee2c945f873213d677116a3a1540a3c2e23a4c413b3f8ae930dc8c9fe6834207a281344a68782b3270210e9530b56e9b1d7fffab8dc7eda4a2dc059566e7c8c997683c640eab00e97a6a62f2da9dd1ce96f68f1bb94014f98951a01f0ffc08875afd517e747e06cae49616dcd6b0e3bead8a79826789ca4c61efa7bc407acdea93e5a4123f626a43a767282f8ef58e59c73bff87c557ac622bc18263368102b817cdbdf6b53f68d1a5ff02594b8f717d563201aa5a15021ff00e96035d512cbfc4dd08fd8097d953959a11d04d8740464f2e44ccec71f5555aa42598f988c41156583091d77584eba2e3a1384a34bbf9", 0xf0}, {&(0x7f0000000200)="b57b2e24e6d014622a856b9a76727751003617910c8dd607cdbb1fc290bacfdb9c321e0f7eefb065d64700fe632ebaca78e06dc79ef24781518b1ed144a1df4577d209307cb72821bade31231b2647912a2783884b5b31037c2c3d10b931156ca66667e69d4f8c4c8bd0d5085e12e2e9fc36dccab35aa25579acd99635f25169df345d79b65d40ab3256555f4cba1944b4daffefb17fc98191551085ec636fcc0a6d5fa461aa44284e00739788447c122e4989737b269e1001d29dd3f4ce337e870da04761391444b68def1e066caa3ee56a44a0570eda57c886844f07e02cf6c157c93e0a294df8d8df7817c440d3524d20", 0xf2}, {&(0x7f0000000300)="1fbae31da6117405ac945e542cb292c7ab543305a8bb6cc7bdd627ec8ab2884d00397943ac33cf05d5c64b06c22c606872e404210fe9d09d7109d63149dfe64b66f88881bbac2d2d622c37dd085794131d9c9073e4db9196e0cdb77c58d1770e2e9ec7e23ef082be48f5ad8c682c4d2e548e470102812dffe5c675f4d8793d5eafbac761cc7497eb985e23253cc0c6fb90e7413bfdeee039b7269cd158608fe9d86bd5dbe8c4f17dccbac5d27cc7a3918d855fe8781ed91d549fd3dbb66e491ecb0c3703ebd1422d7fd498cc6e5e82fdccc6be1ffedb242ef11fb1f305136b2bf84ff11b6770aecb90e6", 0xea}, {&(0x7f0000000000)="35910146b6979742546fe3ec853f3623c10ce571527d86cd6dd1de003f5b18a5cc22b7aca21d199fa9ca8cd36a8a1394948338c7aead7f951938c3f9bf8181018dd2785b973cd795d9f394e3dec4cc9e9b80f60383b451a8502f1fccb6d6c2a23e3441f08c91820a80be838593bd", 0x6e}, {&(0x7f0000000400)="4236f6bed4dba79fd5d593d28333ab7cb8482391c94d4ed967f4369af6e4a3fa38da055c5c0320c512e8cfc162a712e8f82d0f15900e62cbd8c5a662d70492035eb8431138cd59ce328218fc9d6fda88dc4712f925b40c0be017c55de4ed560413ffc391018b2689d70b33c0463a429c0b99ab189708d9f430540f68d0cea93911dd9f21406af8951117805a", 0x8c}, {&(0x7f00000004c0)="7ecac86ba3824771c6bd69e5d59a07a55de710cbc847eca8c840d253b98fad95c823b6299aa07dfa64f6155b136da5a219484856bca4f0b7739d98bf51f198b3dbf6bd4d0c653b6fb320a56d37a4ebc6", 0x50}, {&(0x7f0000000680)="53b35fc35be4e0d4c1da9f1c95dca5a943fc5b93cac01570f31f04f7822e2954fbd3aa37947e856a17e4e7eac1e654ee8a2ac47c97146793acbabf0ee533cab8829dd475801ede3cbb81a0b8100462aabe097d6becf06383f2a5f2ac86f9345e2598964cbb8ff83bf2dd40df5b27167b55d3841ca9ea641350d079f64052970be5dadc64a48fca290d72e94d19a333688d0b92040c5389bdd1a8b41eb480fbbb54727a637c71dfc8b2338d0c8e6f34a2c4e15c3d58d9cec83d1c2c5746e068a334417f6a0c62448a23aaa816cf49ef74962ab1bf0a82e594722794451bdee6ee", 0xe0}], 0x7) (rerun: 32) 6m8.375822561s ago: executing program 1 (id=101): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r1, r1}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESDEC=r3], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r6, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 6m8.357426307s ago: executing program 0 (id=102): ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000700)) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x158, r5, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180600000000000000000f0002000000186700000800000001000000172effff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000001080)={0x5, 0x7, 0x1, 0x4, 0x1, 0x3, 0x80, 0x5, 0x5, 0xfe, 0x5, 0x7, 0xa7, 0x9}, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000001c0), &(0x7f0000000200)=r7}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xc4}]}}}]}, 0x38}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9e9e, 0x7, 0x0, 0x0, 0x7}, &(0x7f0000000580)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000005c0)={r12, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x8, 0xf3c6}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) socket$inet_sctp(0x2, 0x5, 0x84) 6m8.307226202s ago: executing program 3 (id=103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x80010, r0, 0x93e76000) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000001b00)="27190c7bbf22a4e24c6a1e5e0c17bbb3d473e212f15ba2b4627f69f469aa4c599c6153ce44f900531958ff9aabd1aee4e01c076b94bca7dd8de5958f277860a877a9439afcfa03351f583befd68b79ca6093d203f58f0f855bcb48b69427c7e734762cdd8586e59d6140a388931179698a3c2b313532de0ceaa51e524d61056a4173abbf5459e32d9e6ae0067da3c72dae464f1488fa10a1d91d12b05248fd45db9f0cf9be25e4961fd295e7becf057b4e3397683024278e9f05c7014be2f9b810ae098d65a5730c594a81356a83cb18132822dcfc311ca45f510559e7b000b6590f7131cb71f4dd2544a972d81d20ce6c0bb4188a1c0947dcb3d840f5905ec403e0c2513fc8ee4e1d786b093bcb39afaef1e772d1cc82f2996d9a829f6059635139a1398eef9aa17bca16791d4d1811d5f97b0f58f5d89cafbe3b71e666a96f521ed774e75e01cec55fabe99719b11c904029d4cc47e181f1d28cf0226e8aab3cb5ddbd4071726b62efb77117d6318c4e9ec4e63292da859f36d37e83ff5997e092eb5c66e2f39b1211d3b1c78e61a3ae5b674b6527062fdf7fc20b3f233fbaf4a2cbf44d43709a1aa096ee9076f152b82b937d613df5705c5c90bb9c4977792058fafb35aba41b39c8ce344b06b2b9db889be4689db1067ad0c3154eebc74c04d2a2146d022a6244257bd6f48fc153fa864b346f0f1e830f5234982c70870a60cfe2372b2fe047112f31ba1591b572b4c6ad7481a42bba9054208ab48a95f5f606070d1d2c02a14d7b5755448abae8ff424e11c8060fc28907c7b2c892b530d448de4daba4be807d57d864ab06ea952333fcfc8e75f97133c423c38cf332d8369cbbe8f771292dec0f319807de215f1f1ec8ce18e326d4ebcce4211c6330cdeea26d08e033e5f4dd9fd07e5032e43ab3e8fd80180dbf8081a8a1fb292836d94cf2f56445695d26881a6f9896b9eea04dc7a6c0835cc9cb6563562a15575d25c8e509190446da56b100e424cc15b302b54b89302e14b78ec1571b1c965170f42d8748f03e4bca50705ad640b81619759353e62a0e7ea4048056d5ce1ff1d49cf2067f095953a63e56a539f26832ecd53df737125c52be7f4cd9307c9c0f4ac620be54121af4b08505118a8b0d80a2a91d19e3033e3ad061f253d53e06454113f870731a83bde4350733799fd0e861223c8860696ab5eb9b345697cef40acaed75e6843cc57cc316ea9fce5e8ec5a3e0ca1d0e8db57963c29a8692d1f961427298c05856beb384a29f0146026e357505c769b2c5feb8cf94b21811b7e4f9a136598b5de5de1adb85e02d913915db44c61975c7c2ac27ea4ef9140a910721652b562a84e731f6c82cbb1dd46d0047e4acc38dcb3babdecb7a8c847f682426ac9494a1a7f01221b0caa09509e3aaf8f41f4f95d2ae18447ba9cf33651664f8d00d185e48336e7f19bfa41645654410438cc88684e1474ec4029ae760d63ce0ab0d2e38f36dbe016df7481a0d7c834fc8254fbca3bcafcbfb2a55c827d976d5cca77bbf2e5106699c15876e29c9cec8983b9944a5e22aa241f3873bcba61057f2c1f11ec08b984afcfdcb6610ad5faa7c7fb4235b06e0f137546b0a2983e824bb9ae7d12a2cb9b71ab13ef1dcd65cb34941b4e7d2205dce760da967b40e942466494da6b75d6abd394dec8b7cbdbdce8ec56a5587eb5ad78c0f4a03f01e2d47b47b62d45ebe34d555d65e2aac12702980844a1ef99cca57cbb3f89f3ef1d03114d24e3196ac6f91d3a81a5d02cf9a0861607d9221c0fdd2a232724290320be1d1411245f91817756b03c43ecbfccf52991ed4be1fcc90374a7f22fa415abda2350c72d1a0882721a575027f0b2debefe36158b869218275902f4e6336a4cef443f5ac97ade1077a1c6c852c09e0ef8f4a5ffa62ea3dd0aa6d1c6c5c3c48baa2658b41194eff36d0e09799c12e34d9fd2d30b829311dde56ca49d6fce3adbcaa719d3d083675fb90773d65f69537038bcdd9b4cad469668a180d041330e31c9dc742b2280256dd41037d41220684f7f546a2d2ae0f211355596da3845971c788bc04abee914d681eee76af18627fe3d0287e98716213389898ef5df0fca573b29b1945a275b8504ff96ab43fa2ad264537dc3b00f795653e2686c02b14e7c93c3ebaebda77ffdbd957825f047ba50e50a7eab7d907a53f01c36417ced0d31d347def4958a650c25964069cf76742a1a14ef9993e0d4c67f29c31f981e72f549883770200a87b42334030c55847e19cc314938a7f45c5268224eb9fea436dd8c09d63be439659bce9691133b1c28059fd2f2d11c6fa954dfad37b7ef9976a14840a5b69ab97ef1e4b4e1263e47966fd85cfc05ae1c4e641f7bbcd058dcf0c0cd0324898e21cdbd2039f9f7c2edcffabb4d86086570b2cf81e358ab90cc917dceab637c1923aa76c0f5224d4b431b91c4407702806f5713ea0735a81d89c4ba49f6a0f4fc39e1bcb5249d7e13ac75859bcf3500017c3d286c65da3d2684e36d18c8f8482f25e61529f8b12113de8d2b65801a80f73c6d2d767e8a1865022a8edc3cb0abf16973c7b95d7228fc3e040fc9db8c80e42f570a88d0c5da6dbe83873b6739d2a2fea7cdd3a9bb68ffc518238b5f9010a23c1a54ee465b372558a52c26d0426d884975c3a9186e82a6be712bf72de7122dd0f279107688c0b740b7f238e09a1ffb24e22b6f36fd5fb8a27835af7e66313d2cc1965ae7b9d769a88475a417a7c5807c2cc605d6340f90f6dbf9c572f2cab831fec853f200bfcb87797a1103f1a7ad45641fdd9b6ce4ce741a214091b6f61f3b018fe37582921b761ed638de245785e7cf102b5ddd95116109fd671781fda242c04a5e4604dea121de3f520fea679036da11489439ec5d8ed452c172f6133911471b7ac0d2f966bafb05a735dac97a1c02ff1c5de98bae8d006791641647c212acfd4148435138b6953f298b6fe6a83fb45bfa2f8c09c48880e7eaa92af9e22c450bb03c15ce1a3e31bbe766fe4db81239c7ea567c5b7eefb99a26a57bcffe02ad75efef69db7fb3e04463d6228cac82ed280f50d058373b6ad217287a3df0cfeb51552246957e2ba7c1cde6fe863bc4e0f4ca5df40f5bd7c250a6ed405fc9dcce94f8549032b3c7c457f39bbee6f41dddbd5ef5053bcbf39d095d13d51e17569a43cd05535c8e35256271f64841af8e2cf644c4abc0d9a1d5f72334e3c273c44bde8bd82e36620231d6f08ba1101f700ff084584dc7cc711c898ce8185fd842f66bf4914fcab8ef0c930e34ff0f46d39818109d0e1e3c725cbf462e385b38d13fecf65205f71563375a5e32691271a3cf5221deb666fdae4c210e6e9b7152d56810b1d46ca29ea7f5a9b0d2f15a2fc8317ef4616d399ca759a74bf1f7f57a154fa046746ed16da96e95c6e7416d2961ca66c36208660983b3ba2ff05706abf39d7608c52b3e16bab2964940fb2d2ca89dbf0b009b465a964f23115df7a0c25629cf4b259529680103e920f95ad8993fa067bd56e746e124f3bb85eabddcb7f686ee23e7b5cc7c83e5c5f9e723d032f972097aba650c0ef67ac4d0d827857e712487de0e9c05796e178a0edb0a644e908a51a4bfe7cf2d3e0bf759f35659521e3863e28508095f35eb3d8d8e9fb5954c52c40761760e4ec3105d24b52b1e3a48638b8d933f19845b58959d7a85be42f7e15b4ac3e717681f609e61d0200b6541fe2d9836bd6798cbedae30f8c62ba83ce6a0b4fbb0ba31630ab71ca6f62a7b76e3ac3fd76ac3e497ad00dd16cb72018d146c0e20001d5e6e00fff9ed2f038fd66f1baf16b3312caec2ed358fe70f46505f97a584deefc6a7a29d4f744add4971b44dfb10cea5749c52369a1f9bafc2fc1e1425b7710409219b2a8eacb948db46b59057172256fad1696791a8675a5fa51e864f044ffcf7e765fcfe742524902e4ac73bc15fe337a6c838abdf6e635a6f75eee5d21df7ed3bcebe775f2ac4410d2572b634e29b96e1960f9308ea5a672fcb9758f7b0d3fcec4f3841629ca70c2f902fd96acdf443642582437d06da9c673eb850296408bb6a428bca813cf9829ec66d3378fa491999f6611a12f04f8b65327275d5fe79e8a5456a864948ae6eaea8eb41f4b669a93e0618ec1bb63d0e038ef4494de597464156f32f15720453316a0abe0417158095b85f32530fa0b74f3880ea658db0ef68dfc15bc10139d4be71016c02377d97bc41637030ce6aa58ae0b8bf584a6b4cde339e28920515c502ac54889498dead67c76201d019e2baa5ad88f26f8d3beabe8b9967f8bf135ded1b175b6a4256a7aa8daf4de99141dd2ddd45c7c707aa7976c9e986a37020b9743ec1147afb75f8e124ffb7c227c403f174d2d99d7bd3b08aad1bfa40d5a240fe0dff7f1ec43d57e2b2392f7532df908e390aea3e76ccfabe29065a6b02855bb0ef1cb6fc3edd76d2f45156d4e58b8a1ce07b2d1b48278725914064707c425db3c925078def5dbfc3e2d2e9260eedeac172b05cb802f53cb99b2ace1729f085719f1c97785779f29ed6e46da4d3b50c449cb4de951b8f24e1342a3f626e64e2a57cc0b7a7dd167ccd0700ca11ecb976cb5f25fd1ccc68e092736e1a666b39d1893710801a1c2ef2f9ef10a4f4141692d96eaa8488a1e74cae67b14f30e3a9b919b15c9fb5a0a9daadabb1194ef7f573ad74b0ac2a5a08fe5a47cd1388c6eac3817bd856967c8c36cbbd53f92253332cc7885478857ef4a7841ba3ac710b030ab981cbf9fbf476a529f24ec461ab35476f744cf3cf0bbc24bdefa0ad4499d2fdeb4564dc3a11ae63c2f6d4e5c8de5cf4c1afc4fec4e42c0935916ba081993688bf9f96a01fb6df091d3524495ecae362294b222cc851ec39ff0c243585dd1b1d8ae14c2b1abc4669624bdea7d4e1c657b429ef45fb8112d4351aa175aaae5643c2a1c02dd8ee35192b524e4d2fb1e9da2517f2a6b611b5cbc2379d4a12c05b582fb6a11ab38665a6e6ab5f79c093794d607d705e65b1527059ed0e2616f867580ce41cae9b9e228d050daa144ed19ae8e1aaabc22d668012ba7ef7822a88dca3e4bed0c2d397e1b53fcdb80de1e36c65a43a2b209101c96a7a69d5f60e482845d92c10f901642c6c6ee62d83b653c5a8b832842b8727df2520b35a37737509126286cfb73615b366a26d2d9a3e967700db210d3bd3d49b253dac7d8865e987c12382b43fea4add0d2e25493dd8559d27fd9269342bf37769b6392f752ef10bd17018ca30e0f5b9cefc283b9978556d994685cb7a91d7b70492689649aa6a3d8746d0d0db74c8f7e5c89671765b262873344ddeeb75f0655aaa6bc6cec9620f9d935a1f709613d189ae9520b35900bb1cdad003692db8b32f32017966a3c118faec7d04f8b5dfa3f1473e4ab2f9dbf4abe4c1b2b1ca2ac313b13f4d1c72b3c43065b262439f43e35d29bb39197ee3ffa8031abbfd8f4c788438add81e792bc4e59cc4ba354cc004b3499b0eda0a14db01a473a0a99af8a0dad410355e67501cdf6a04d239dc31027cc0e1dc993f78f8b6972322fa014f141dae7f70b6512969f87ca387a3a8601b66d29195afdba9164f49880b49beeee25128d1c1ba48db6056a9c99c65289298916bf4fd811054487b55cd1c894cad2a67aeacc580334b4358debb61f58c304b79fb675e5f17f75f0f270bcfa5bfa0d23d873447030f91bee812daedfe924509828fdeb51589acd428e8b586e7d2724dc085d2daa680641e360e170b1e256412156b10a95e587a1") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r5, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030"], 0xfc}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], 0x114}], 0x1}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x50) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) 6m8.306419923s ago: executing program 2 (id=104): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r1, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000100)=""/221, 0xdd) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x80, 0x80800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x8946, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x4000000) 6m8.306022217s ago: executing program 4 (id=105): getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000000)) (async) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x76e}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 5m42.45180184s ago: executing program 32 (id=102): ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000700)) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x158, r5, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180600000000000000000f0002000000186700000800000001000000172effff9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000001080)={0x5, 0x7, 0x1, 0x4, 0x1, 0x3, 0x80, 0x5, 0x5, 0xfe, 0x5, 0x7, 0xa7, 0x9}, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f00000001c0), &(0x7f0000000200)=r7}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xc4}]}}}]}, 0x38}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9e9e, 0x7, 0x0, 0x0, 0x7}, &(0x7f0000000580)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000005c0)={r12, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x8, 0xf3c6}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) socket$inet_sctp(0x2, 0x5, 0x84) 5m42.384638206s ago: executing program 33 (id=101): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r1, r1}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESDEC=r3], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r6, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 5m42.31312215s ago: executing program 34 (id=104): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r1, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000100)=""/221, 0xdd) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x80, 0x80800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x8946, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x4000000) 5m42.246291679s ago: executing program 35 (id=103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x80010, r0, 0x93e76000) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000001b00)="27190c7bbf22a4e24c6a1e5e0c17bbb3d473e212f15ba2b4627f69f469aa4c599c6153ce44f900531958ff9aabd1aee4e01c076b94bca7dd8de5958f277860a877a9439afcfa03351f583befd68b79ca6093d203f58f0f855bcb48b69427c7e734762cdd8586e59d6140a388931179698a3c2b313532de0ceaa51e524d61056a4173abbf5459e32d9e6ae0067da3c72dae464f1488fa10a1d91d12b05248fd45db9f0cf9be25e4961fd295e7becf057b4e3397683024278e9f05c7014be2f9b810ae098d65a5730c594a81356a83cb18132822dcfc311ca45f510559e7b000b6590f7131cb71f4dd2544a972d81d20ce6c0bb4188a1c0947dcb3d840f5905ec403e0c2513fc8ee4e1d786b093bcb39afaef1e772d1cc82f2996d9a829f6059635139a1398eef9aa17bca16791d4d1811d5f97b0f58f5d89cafbe3b71e666a96f521ed774e75e01cec55fabe99719b11c904029d4cc47e181f1d28cf0226e8aab3cb5ddbd4071726b62efb77117d6318c4e9ec4e63292da859f36d37e83ff5997e092eb5c66e2f39b1211d3b1c78e61a3ae5b674b6527062fdf7fc20b3f233fbaf4a2cbf44d43709a1aa096ee9076f152b82b937d613df5705c5c90bb9c4977792058fafb35aba41b39c8ce344b06b2b9db889be4689db1067ad0c3154eebc74c04d2a2146d022a6244257bd6f48fc153fa864b346f0f1e830f5234982c70870a60cfe2372b2fe047112f31ba1591b572b4c6ad7481a42bba9054208ab48a95f5f606070d1d2c02a14d7b5755448abae8ff424e11c8060fc28907c7b2c892b530d448de4daba4be807d57d864ab06ea952333fcfc8e75f97133c423c38cf332d8369cbbe8f771292dec0f319807de215f1f1ec8ce18e326d4ebcce4211c6330cdeea26d08e033e5f4dd9fd07e5032e43ab3e8fd80180dbf8081a8a1fb292836d94cf2f56445695d26881a6f9896b9eea04dc7a6c0835cc9cb6563562a15575d25c8e509190446da56b100e424cc15b302b54b89302e14b78ec1571b1c965170f42d8748f03e4bca50705ad640b81619759353e62a0e7ea4048056d5ce1ff1d49cf2067f095953a63e56a539f26832ecd53df737125c52be7f4cd9307c9c0f4ac620be54121af4b08505118a8b0d80a2a91d19e3033e3ad061f253d53e06454113f870731a83bde4350733799fd0e861223c8860696ab5eb9b345697cef40acaed75e6843cc57cc316ea9fce5e8ec5a3e0ca1d0e8db57963c29a8692d1f961427298c05856beb384a29f0146026e357505c769b2c5feb8cf94b21811b7e4f9a136598b5de5de1adb85e02d913915db44c61975c7c2ac27ea4ef9140a910721652b562a84e731f6c82cbb1dd46d0047e4acc38dcb3babdecb7a8c847f682426ac9494a1a7f01221b0caa09509e3aaf8f41f4f95d2ae18447ba9cf33651664f8d00d185e48336e7f19bfa41645654410438cc88684e1474ec4029ae760d63ce0ab0d2e38f36dbe016df7481a0d7c834fc8254fbca3bcafcbfb2a55c827d976d5cca77bbf2e5106699c15876e29c9cec8983b9944a5e22aa241f3873bcba61057f2c1f11ec08b984afcfdcb6610ad5faa7c7fb4235b06e0f137546b0a2983e824bb9ae7d12a2cb9b71ab13ef1dcd65cb34941b4e7d2205dce760da967b40e942466494da6b75d6abd394dec8b7cbdbdce8ec56a5587eb5ad78c0f4a03f01e2d47b47b62d45ebe34d555d65e2aac12702980844a1ef99cca57cbb3f89f3ef1d03114d24e3196ac6f91d3a81a5d02cf9a0861607d9221c0fdd2a232724290320be1d1411245f91817756b03c43ecbfccf52991ed4be1fcc90374a7f22fa415abda2350c72d1a0882721a575027f0b2debefe36158b869218275902f4e6336a4cef443f5ac97ade1077a1c6c852c09e0ef8f4a5ffa62ea3dd0aa6d1c6c5c3c48baa2658b41194eff36d0e09799c12e34d9fd2d30b829311dde56ca49d6fce3adbcaa719d3d083675fb90773d65f69537038bcdd9b4cad469668a180d041330e31c9dc742b2280256dd41037d41220684f7f546a2d2ae0f211355596da3845971c788bc04abee914d681eee76af18627fe3d0287e98716213389898ef5df0fca573b29b1945a275b8504ff96ab43fa2ad264537dc3b00f795653e2686c02b14e7c93c3ebaebda77ffdbd957825f047ba50e50a7eab7d907a53f01c36417ced0d31d347def4958a650c25964069cf76742a1a14ef9993e0d4c67f29c31f981e72f549883770200a87b42334030c55847e19cc314938a7f45c5268224eb9fea436dd8c09d63be439659bce9691133b1c28059fd2f2d11c6fa954dfad37b7ef9976a14840a5b69ab97ef1e4b4e1263e47966fd85cfc05ae1c4e641f7bbcd058dcf0c0cd0324898e21cdbd2039f9f7c2edcffabb4d86086570b2cf81e358ab90cc917dceab637c1923aa76c0f5224d4b431b91c4407702806f5713ea0735a81d89c4ba49f6a0f4fc39e1bcb5249d7e13ac75859bcf3500017c3d286c65da3d2684e36d18c8f8482f25e61529f8b12113de8d2b65801a80f73c6d2d767e8a1865022a8edc3cb0abf16973c7b95d7228fc3e040fc9db8c80e42f570a88d0c5da6dbe83873b6739d2a2fea7cdd3a9bb68ffc518238b5f9010a23c1a54ee465b372558a52c26d0426d884975c3a9186e82a6be712bf72de7122dd0f279107688c0b740b7f238e09a1ffb24e22b6f36fd5fb8a27835af7e66313d2cc1965ae7b9d769a88475a417a7c5807c2cc605d6340f90f6dbf9c572f2cab831fec853f200bfcb87797a1103f1a7ad45641fdd9b6ce4ce741a214091b6f61f3b018fe37582921b761ed638de245785e7cf102b5ddd95116109fd671781fda242c04a5e4604dea121de3f520fea679036da11489439ec5d8ed452c172f6133911471b7ac0d2f966bafb05a735dac97a1c02ff1c5de98bae8d006791641647c212acfd4148435138b6953f298b6fe6a83fb45bfa2f8c09c48880e7eaa92af9e22c450bb03c15ce1a3e31bbe766fe4db81239c7ea567c5b7eefb99a26a57bcffe02ad75efef69db7fb3e04463d6228cac82ed280f50d058373b6ad217287a3df0cfeb51552246957e2ba7c1cde6fe863bc4e0f4ca5df40f5bd7c250a6ed405fc9dcce94f8549032b3c7c457f39bbee6f41dddbd5ef5053bcbf39d095d13d51e17569a43cd05535c8e35256271f64841af8e2cf644c4abc0d9a1d5f72334e3c273c44bde8bd82e36620231d6f08ba1101f700ff084584dc7cc711c898ce8185fd842f66bf4914fcab8ef0c930e34ff0f46d39818109d0e1e3c725cbf462e385b38d13fecf65205f71563375a5e32691271a3cf5221deb666fdae4c210e6e9b7152d56810b1d46ca29ea7f5a9b0d2f15a2fc8317ef4616d399ca759a74bf1f7f57a154fa046746ed16da96e95c6e7416d2961ca66c36208660983b3ba2ff05706abf39d7608c52b3e16bab2964940fb2d2ca89dbf0b009b465a964f23115df7a0c25629cf4b259529680103e920f95ad8993fa067bd56e746e124f3bb85eabddcb7f686ee23e7b5cc7c83e5c5f9e723d032f972097aba650c0ef67ac4d0d827857e712487de0e9c05796e178a0edb0a644e908a51a4bfe7cf2d3e0bf759f35659521e3863e28508095f35eb3d8d8e9fb5954c52c40761760e4ec3105d24b52b1e3a48638b8d933f19845b58959d7a85be42f7e15b4ac3e717681f609e61d0200b6541fe2d9836bd6798cbedae30f8c62ba83ce6a0b4fbb0ba31630ab71ca6f62a7b76e3ac3fd76ac3e497ad00dd16cb72018d146c0e20001d5e6e00fff9ed2f038fd66f1baf16b3312caec2ed358fe70f46505f97a584deefc6a7a29d4f744add4971b44dfb10cea5749c52369a1f9bafc2fc1e1425b7710409219b2a8eacb948db46b59057172256fad1696791a8675a5fa51e864f044ffcf7e765fcfe742524902e4ac73bc15fe337a6c838abdf6e635a6f75eee5d21df7ed3bcebe775f2ac4410d2572b634e29b96e1960f9308ea5a672fcb9758f7b0d3fcec4f3841629ca70c2f902fd96acdf443642582437d06da9c673eb850296408bb6a428bca813cf9829ec66d3378fa491999f6611a12f04f8b65327275d5fe79e8a5456a864948ae6eaea8eb41f4b669a93e0618ec1bb63d0e038ef4494de597464156f32f15720453316a0abe0417158095b85f32530fa0b74f3880ea658db0ef68dfc15bc10139d4be71016c02377d97bc41637030ce6aa58ae0b8bf584a6b4cde339e28920515c502ac54889498dead67c76201d019e2baa5ad88f26f8d3beabe8b9967f8bf135ded1b175b6a4256a7aa8daf4de99141dd2ddd45c7c707aa7976c9e986a37020b9743ec1147afb75f8e124ffb7c227c403f174d2d99d7bd3b08aad1bfa40d5a240fe0dff7f1ec43d57e2b2392f7532df908e390aea3e76ccfabe29065a6b02855bb0ef1cb6fc3edd76d2f45156d4e58b8a1ce07b2d1b48278725914064707c425db3c925078def5dbfc3e2d2e9260eedeac172b05cb802f53cb99b2ace1729f085719f1c97785779f29ed6e46da4d3b50c449cb4de951b8f24e1342a3f626e64e2a57cc0b7a7dd167ccd0700ca11ecb976cb5f25fd1ccc68e092736e1a666b39d1893710801a1c2ef2f9ef10a4f4141692d96eaa8488a1e74cae67b14f30e3a9b919b15c9fb5a0a9daadabb1194ef7f573ad74b0ac2a5a08fe5a47cd1388c6eac3817bd856967c8c36cbbd53f92253332cc7885478857ef4a7841ba3ac710b030ab981cbf9fbf476a529f24ec461ab35476f744cf3cf0bbc24bdefa0ad4499d2fdeb4564dc3a11ae63c2f6d4e5c8de5cf4c1afc4fec4e42c0935916ba081993688bf9f96a01fb6df091d3524495ecae362294b222cc851ec39ff0c243585dd1b1d8ae14c2b1abc4669624bdea7d4e1c657b429ef45fb8112d4351aa175aaae5643c2a1c02dd8ee35192b524e4d2fb1e9da2517f2a6b611b5cbc2379d4a12c05b582fb6a11ab38665a6e6ab5f79c093794d607d705e65b1527059ed0e2616f867580ce41cae9b9e228d050daa144ed19ae8e1aaabc22d668012ba7ef7822a88dca3e4bed0c2d397e1b53fcdb80de1e36c65a43a2b209101c96a7a69d5f60e482845d92c10f901642c6c6ee62d83b653c5a8b832842b8727df2520b35a37737509126286cfb73615b366a26d2d9a3e967700db210d3bd3d49b253dac7d8865e987c12382b43fea4add0d2e25493dd8559d27fd9269342bf37769b6392f752ef10bd17018ca30e0f5b9cefc283b9978556d994685cb7a91d7b70492689649aa6a3d8746d0d0db74c8f7e5c89671765b262873344ddeeb75f0655aaa6bc6cec9620f9d935a1f709613d189ae9520b35900bb1cdad003692db8b32f32017966a3c118faec7d04f8b5dfa3f1473e4ab2f9dbf4abe4c1b2b1ca2ac313b13f4d1c72b3c43065b262439f43e35d29bb39197ee3ffa8031abbfd8f4c788438add81e792bc4e59cc4ba354cc004b3499b0eda0a14db01a473a0a99af8a0dad410355e67501cdf6a04d239dc31027cc0e1dc993f78f8b6972322fa014f141dae7f70b6512969f87ca387a3a8601b66d29195afdba9164f49880b49beeee25128d1c1ba48db6056a9c99c65289298916bf4fd811054487b55cd1c894cad2a67aeacc580334b4358debb61f58c304b79fb675e5f17f75f0f270bcfa5bfa0d23d873447030f91bee812daedfe924509828fdeb51589acd428e8b586e7d2724dc085d2daa680641e360e170b1e256412156b10a95e587a1") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r5, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030"], 0xfc}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], 0x114}], 0x1}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x50) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) 5m42.118478777s ago: executing program 36 (id=105): getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000000)) (async) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x76e}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 3.38170854s ago: executing program 6 (id=3507): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0xff) (async) syz_emit_ethernet(0x6e, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a262d00383afefe8000000000000000000000000000aaff0200000000000000000000000000010200907804000500620813313f6fff00ff0100000000000000000000000000010000000000000000000000000000000184000a3865000000ce7c24c7b6a53561392d0668e476949654d5ffa82f494486ef39c60c066d5a27ab8f6b36e9294f2ef051b3b5d41966af2c1985d4581c91eb42eb1502def568f109d086b40acf91eff29609966cc4affe39547371a46a19fdd317d76301c763bdd544a982857e4b7a4170fdbb6807dcd5ce07d71512067c943c9d906275098bec"], 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) 1.709690526s ago: executing program 9 (id=3537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r6}) r8 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_getvlan={0x18, 0x72, 0x4, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r9}}, 0x18}}, 0x0) 1.655924778s ago: executing program 6 (id=3539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}, @NL80211_ATTR_PMK={0x14, 0xfe, "1f442a6dc7cafcd9a9b936ff2031c69e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "9a53ec466498cf08f971b316a1bc454c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e42d4a303397645c35e83440ef2b1741"}]}, 0x68}, 0x1, 0x0, 0x0, 0x6008800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x400, 0x2000, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x2}}, 0x1c}}, 0x20008004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="90010000010a010100"], 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9c, 0x1, "584e9404fd293cba7355912b94561c5b164be64601d5bd0ae7914e28bb79aa53fb2b93de336204d4aa0c25973ff50c2a89414e1c94aef78bf02ebe6039fb5b5f5f7ee5a1a3b5c3f65e35f57617f88ab909271f69cc31ed5c4101273e6c92e0957456bfc11f88045715cc2ac84e1ed2380eb08cbf669493b4c6764ca0150f24cede80467e95e08108456aea3130dd353aafcc7b91a862cb73"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40001}, 0x4000044) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}, @NL80211_ATTR_PMK={0x14, 0xfe, "1f442a6dc7cafcd9a9b936ff2031c69e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "9a53ec466498cf08f971b316a1bc454c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e42d4a303397645c35e83440ef2b1741"}]}, 0x68}, 0x1, 0x0, 0x0, 0x6008800}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x400, 0x2000, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x2}}, 0x1c}}, 0x20008004) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="90010000010a010100"], 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9c, 0x1, "584e9404fd293cba7355912b94561c5b164be64601d5bd0ae7914e28bb79aa53fb2b93de336204d4aa0c25973ff50c2a89414e1c94aef78bf02ebe6039fb5b5f5f7ee5a1a3b5c3f65e35f57617f88ab909271f69cc31ed5c4101273e6c92e0957456bfc11f88045715cc2ac84e1ed2380eb08cbf669493b4c6764ca0150f24cede80467e95e08108456aea3130dd353aafcc7b91a862cb73"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40001}, 0x4000044) (async) 1.583570667s ago: executing program 7 (id=3540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept$alg(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) 1.545197737s ago: executing program 7 (id=3541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)={@cgroup, 0xffffffffffffffff, 0x1b, 0x2020}, 0x20) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0xd1383000) (async) close(r2) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async, rerun: 32) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.439668072s ago: executing program 9 (id=3543): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) socket$vsock_stream(0x28, 0x1, 0x0) 1.436726455s ago: executing program 8 (id=3544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xf, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r11 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000000000)={0x2000001c}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r11, &(0x7f0000000040)={0x2000000f}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000585993ead8b1a51edfb4989800000000000000e5e50cdb8ea44cb65cb2d49b127e4dde3904ee2ae7f9d1ec6a9df9c291f97a0b480a2981fc5a4b3961e59e3268204674acf8dec0a4d45bd07822a5963d68b5802ecad0981522dd08b89dce80a719e4f34d408a2bee421755582f3191fe9019b85a8589203f714ecef071cdc1231a115b9c2d6ce2851a7c6e944e2728676ee4d3d792c46c9b92de0f4b5b0fbff50ed0c9cb8f417783eb17e40d5ed2a263f32d193ff9ce1c317575f25ee304952bd6", @ANYRES16=r3, @ANYBLOB="000328bd7000fcdbdf250300000008001700", @ANYRES32=r4, @ANYBLOB="080009000300000006001d000600000006000e004f8f000008000a00020000000500040004000000080011000100000006000e0018000000"], 0x54}, 0x1, 0x0, 0x0, 0x4008891}, 0x20000885) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r12, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r13, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x30c592fe097b0d07, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r14, {0xfff1, 0xb}, {0xffff, 0xffff}, {0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42001}, 0x10010) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r14, 0x0, {0x0, 0xf0}, 0xff}, 0x18) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000005c0)=""/206, 0xce, 0x2000, &(0x7f0000000380)={0x23, 0x0, 0x4, 0x2}, 0x10) 1.350361919s ago: executing program 9 (id=3546): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @broadcast}, {0x2, 0x4e2f, @broadcast}, 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 1.295401666s ago: executing program 6 (id=3547): socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000000000000000000000000000000000002001000000000000000000000000000205000600000000000a00000300000000fe8000000000000000000000000000bb000000000000000001001800000001"], 0xa8}}, 0x0) r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000001140)={{0x3, @null}, [@remote, @null, @remote, @null, @remote, @rose, @netrom, @netrom]}, &(0x7f00000011c0)=0x48, 0x800) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000001200)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000010c0)={'veth1_to_batadv\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) sendto$packet(r4, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, r12, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0xd82, &(0x7f0000001080)=ANY=[@ANYRESHEX], 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.295157806s ago: executing program 7 (id=3548): r0 = socket(0x10, 0x80002, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x10) (async, rerun: 32) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.204440722s ago: executing program 8 (id=3549): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) pipe(0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe15) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000280), 0x2, 0x0) read(r4, &(0x7f00000014c0)=""/4125, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 1.161060327s ago: executing program 9 (id=3550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @timestamp, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) (async) sendto$inet(r0, &(0x7f0000000580)="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", 0x338, 0x40c0, &(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000440)='GPL\x00'}, 0x90) 991.512243ms ago: executing program 7 (id=3551): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095", @ANYRES16=0x0, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r3, 0x0) 945.479958ms ago: executing program 5 (id=3552): r0 = socket(0x2d, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) (async) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 938.224642ms ago: executing program 9 (id=3553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r4, 0x1, {0x2, 0xff, 0x1}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r5, 0x3, {0x0, 0xff, 0x2}, 0x1}, 0x18) close(r6) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000100edc1157022ba2083109464435fbb009bf78e584d9d668a4f1b36db368b1693ea70d0f32d8a1c92ac07868978c854442aca5c996b0819c59597b34427925f7da55a6b4d69b3e72b617fe100723d52a2d0486cea965429b5a0249f5633997c7c20e82c6b38f06239b214b86fd489b43a45a451a92237bc88227c70432130099c7d55c92e3df4", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r10, 0x0) r12 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x61d0, 0x0) sendto$inet6(r12, 0x0, 0x63, 0x4000001, 0x0, 0x212094f8a134d7de) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r11) write$nci(r1, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000240001200000000000000000e00000020000000000000000000000000000000000000000000000000000000000007079000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r13 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 879.541074ms ago: executing program 6 (id=3554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) 875.886983ms ago: executing program 8 (id=3555): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x3, 0x6, 0x2, 0x0, 0x4, 0x2040009}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000085}, 0x4805) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = accept(r1, 0x0, &(0x7f00000002c0)) shutdown(r3, 0x1) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003180)=[{{&(0x7f0000000300)=@un=@abs, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f00000005c0)=""/239, 0xef}], 0x4, &(0x7f0000000700)=""/4096, 0x1000}, 0x401}, {{&(0x7f0000001700)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001780)=""/215, 0xd7}, {&(0x7f0000001880)=""/13, 0xd}, {&(0x7f00000018c0)=""/131, 0x83}, {&(0x7f0000001980)=""/205, 0xcd}, {&(0x7f0000001a80)=""/171, 0xab}], 0x5}, 0x9}, {{&(0x7f0000001bc0)=@hci, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/149, 0x95}, {&(0x7f0000001d00)=""/85, 0x55}, {&(0x7f0000001d80)=""/142, 0x8e}, {&(0x7f0000001e40)=""/119, 0x77}], 0x4}, 0x3}, {{&(0x7f0000001f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001f80)=""/54, 0x36}, {&(0x7f0000001fc0)=""/191, 0xbf}, {&(0x7f0000002080)=""/48, 0x30}, {&(0x7f00000020c0)=""/12, 0xc}, {&(0x7f0000002100)=""/165, 0xa5}, {&(0x7f00000021c0)=""/73, 0x49}, {&(0x7f0000002240)=""/247, 0xf7}, {&(0x7f0000002340)=""/81, 0x51}, {&(0x7f00000023c0)=""/212, 0xd4}], 0x9, &(0x7f0000002580)=""/5, 0x5}, 0x8}, {{&(0x7f00000025c0)=@qipcrtr, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002680)=""/70, 0x46}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/81, 0x51}, {&(0x7f00000027c0)=""/200, 0xc8}, {&(0x7f00000028c0)=""/110, 0x6e}, {&(0x7f0000002940)=""/82, 0x52}], 0x7, &(0x7f0000002a40)=""/92, 0x5c}, 0x5}, {{&(0x7f0000002ac0)=@nl, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/158, 0x9e}, {&(0x7f0000002c00)=""/52, 0x34}, {&(0x7f0000002c40)=""/11, 0xb}, {&(0x7f0000002c80)}, {&(0x7f0000002cc0)=""/37, 0x25}, {&(0x7f0000002d00)=""/224, 0xe0}], 0x6, &(0x7f0000002e80)=""/4, 0x4}, 0x4}, {{&(0x7f0000002ec0)=@nfc_llcp, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/24, 0x18}], 0x1, &(0x7f0000002fc0)=""/82, 0x52}, 0x1}, {{&(0x7f0000003040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/35, 0x23}], 0x1, &(0x7f0000003140)=""/5, 0x5}, 0xa10}], 0x8, 0x40000000, &(0x7f00000033c0)={r4, r5+10000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000003400)={0x0, @in6={{0xa, 0x4e20, 0x2, @local, 0x3}}, 0x7, 0x0, 0x0, 0x8, 0x10001}, &(0x7f00000034c0)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000035c0)={r8, 0x90, &(0x7f0000003500)=[@in6={0xa, 0x4e21, 0x1, @local, 0x5}, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e20, 0xac10, @remote, 0x2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x6, @local, 0x3}]}, &(0x7f0000003600)=0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000037c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003780)={&(0x7f0000003680)={0xdc, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000003800)={r8, 0x5, "c7de5bf8ff"}, &(0x7f0000003840)=0xd) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000003880)={r9, 0x7e, "832e889a2e4ebbb72318ce365ee3928a7b89f3932770c96640bdfec5528f6b797960f8d02a3e71311eec89308c89f84f5148b2b19ebca666caaf471dd332d84f192a82958ce150bb6da0c79a6047c528621a44d3a9c006403aea0d37eb72d4dda01185422f0a96ac893a8aa84aad2e40ba99bd67a26d1d34cac3d4179340"}, &(0x7f0000003940)=0x86) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000003980), 0x4) r10 = socket$isdn(0x22, 0x3, 0x2) sendmsg$TIPC_NL_MON_SET(r10, &(0x7f0000003c00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x1c0, 0x0, 0x101, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc37}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2fd1880d3ad4bacefd9f2ccd1144b447468fc38b329d321bd5adde5e3f53fb0678a9b0"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "9df190b47dd5342706c9182cec0871e4c2d18ca62857a8de239db10dcae1ca"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe331}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe286}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6c0, @private0, 0xef}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc56}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x804}, 0x400c820) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003c80), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000003d80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x28, r11, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e00), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000003f00)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x50, r13, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2888}]}, 0x50}}, 0x24008100) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000003f80), r3) r15 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r16 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000004180)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004140)={&(0x7f0000003fc0)={0x16c, r14, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r15}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r16}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20004880) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000041c0)={0x4, 0x211c, 0x205, 0x9, 0x1000, 0x7, 0x0, 0x7, r8}, &(0x7f0000004200)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000004240)={r17, 0x3}, &(0x7f0000004280)=0x8) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000004400)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004340)={0x50, r11, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) 789.917368ms ago: executing program 5 (id=3556): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfffffffc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) r2 = accept$alg(r0, 0x0, 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async, rerun: 32) listen(r4, 0x2) (rerun: 32) accept4(r4, 0x0, 0x0, 0x80800) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040004}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) write$nbd(r5, &(0x7f0000000400)={0x67446698, 0x0, 0x0, 0x4, 0x1, "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"}, 0x10f) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) (async, rerun: 32) read(r6, &(0x7f0000000080)=""/186, 0xba) (rerun: 32) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYBLOB, @ANYRES32=r6], 0x40}}], 0x1, 0x715076165a72ad26) (async) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x3, 0x15, 0x201, 0x70bd25, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) 711.549947ms ago: executing program 6 (id=3557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}, {&(0x7f0000000c00)="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", 0x252}], 0x2}, 0x4) 667.558131ms ago: executing program 8 (id=3558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020603001c85efb277bde40fffd1260000000000000000000001000080000000000000000c000780050015000000000005a7b70554c9e0cfeb00050002000000050004000000000014000300"/91], 0x58}}, 0x800) 530.86307ms ago: executing program 5 (id=3559): r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @local}, &(0x7f0000000140)=0xc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 368.626597ms ago: executing program 5 (id=3560): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x18, 0x2, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9400000000010102000000000000000003000000040010802400198008000100000100000800010010000000080001008d0e0000080002001b000000080016400000000508000840000000040600124000010000100005800900010073797a310000000028001340000000060000000300000805000004000000095d00000002000000000000000900005ab908000c4000000001"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'macsec0\x00', {}, 0x8000}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 311.569508ms ago: executing program 8 (id=3561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0xff1f}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) close(0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f0000000040)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000fe25d3d297", 0x35) 258.276255ms ago: executing program 7 (id=3562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 226.759866ms ago: executing program 5 (id=3563): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) accept(r0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) listen(r0, 0xbaa0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) 99.371976ms ago: executing program 8 (id=3564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000071129400000000009522e70e5a1e912191ebf39b36a5d436b6525b6a9a5fd105a26297ab5118a558399e8ff3efb71d457db3ce4369feb9d1e54484c6"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x3, 0x3, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x64, 0x0, 0xdb, 0x6, 0x0, @empty, @loopback, {[@noop, @timestamp={0x44, 0xc, 0x1a, 0x0, 0x6, [0x12d, 0x3]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x7, [{@broadcast, 0x3}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8000, 0x0, 0x7, 0x8, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x68, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @empty, {[@timestamp={0x44, 0x24, 0xc0, 0x0, 0x7, [0x4, 0x7, 0x9, 0x6, 0x4, 0x5, 0x401, 0xc]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@private2}, &(0x7f0000000400)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private1}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0xb, @local}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x7800, 0x10, 0x7d4b4b3b, 0xffffad2a, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x66, 0x0, 0xd4, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp={0x44, 0x14, 0x19, 0x0, 0x0, [0x7fffffff, 0x2, 0x0, 0x2]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) r6 = socket(0x10, 0x803, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0x10, 0x1000) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0xc}, {0xd, 0xffe0}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400d1}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 99.057141ms ago: executing program 7 (id=3565): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r2 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2f}, 0x20) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) (async, rerun: 32) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'macvtap0\x00'}}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000000)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x1) (async, rerun: 32) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) (rerun: 32) 93.535762ms ago: executing program 6 (id=3566): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xa90, 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) r1 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80003, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newnexthop={0x2c, 0x68, 0x2, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x3, 0x0, 0x23}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 93.080727ms ago: executing program 5 (id=3567): ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124b00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) 0s ago: executing program 9 (id=3568): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2a, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060086dd0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c840) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r2 = epoll_create1(0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8902}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x20, 0x80, 0x3, 0x5, {{0x11, 0x4, 0x2, 0x3f, 0x44, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0xf, 0xc1, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @generic={0x94, 0xc, "fd11e084da016077ad9f"}, @rr={0x7, 0xf, 0xe0, [@private=0xa010101, @private=0xa010100, @remote]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x1e4, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2cb7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8d34}}, {0x8}}}]}}]}, 0x1e4}}, 0x8000) (async) close(r2) kernel console output (not intermixed with test programs): 5][T13204] netlink: 'syz.5.1764': attribute type 8 has an invalid length. [ 329.291242][T13186] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1761'. [ 329.300637][T13186] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1761'. [ 329.561274][T13214] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1766'. [ 329.573687][T13186] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1761'. [ 329.583464][T13217] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1766'. [ 329.684652][T13224] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 330.017784][T13255] lo speed is unknown, defaulting to 1000 [ 330.140289][T13255] wg1 speed is unknown, defaulting to 1000 [ 330.699197][T13275] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 330.776150][T13282] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 330.851206][T13289] v: renamed from veth1_vlan [ 330.971352][T13296] netlink: 'syz.9.1790': attribute type 21 has an invalid length. [ 330.979308][T13296] netlink: 'syz.9.1790': attribute type 22 has an invalid length. [ 330.987320][T13296] netlink: 'syz.9.1790': attribute type 23 has an invalid length. [ 330.995136][T13296] netlink: 'syz.9.1790': attribute type 25 has an invalid length. [ 331.008652][T13296] netlink: 'syz.9.1790': attribute type 26 has an invalid length. [ 331.382646][T13327] ip6t_srh: unknown srh invflags 4000 [ 331.583321][T13340] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 331.592897][T13340] bond1: option packets_per_slave: allowed values 0 - 65535 [ 331.605206][T13340] bond1 (unregistering): Released all slaves [ 331.852901][T13364] netlink: 'syz.6.1810': attribute type 9 has an invalid length. [ 332.066452][ T7718] IPVS: starting estimator thread 0... [ 332.155422][T13377] IPVS: using max 29 ests per chain, 69600 per kthread [ 332.379773][T13367] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 332.461903][T13367] gretap1: left promiscuous mode [ 332.471136][T13367] gretap1: left allmulticast mode [ 332.480615][T13400] netlink: 'syz.9.1821': attribute type 4 has an invalid length. [ 332.490938][T13367] ip6gre1: left allmulticast mode [ 332.497620][T13393] netlink: 'syz.6.1819': attribute type 1 has an invalid length. [ 332.541640][ T49] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.555622][ T49] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.566067][T13404] netlink: 'syz.9.1821': attribute type 4 has an invalid length. [ 332.583400][T13393] bond5: entered promiscuous mode [ 332.589012][T13393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.610392][T13398] bond5: (slave bridge7): making interface the new active one [ 332.618423][T13398] bridge7: entered promiscuous mode [ 332.624974][T13398] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 332.634540][T13402] x_tables: unsorted underflow at hook 1 [ 332.641989][ T49] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.665440][ T49] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.368240][T13454] netlink: 'syz.9.1837': attribute type 21 has an invalid length. [ 333.917071][T13486] bridge0: port 1(vlan0) entered blocking state [ 333.935193][T13486] bridge0: port 1(vlan0) entered disabled state [ 333.961299][T13486] vlan0: entered allmulticast mode [ 333.966545][T13486] bridge0: entered allmulticast mode [ 333.992031][T13486] vlan0: left allmulticast mode [ 334.002481][T13486] bridge0: left allmulticast mode [ 334.043358][T13501] x_tables: duplicate underflow at hook 1 [ 334.156593][T13512] __nla_validate_parse: 30 callbacks suppressed [ 334.156611][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1854'. [ 334.157263][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1854'. [ 334.187554][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1854'. [ 334.197455][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1854'. [ 334.463448][T13534] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1859'. [ 334.808247][T13562] : entered promiscuous mode [ 335.038442][T13583] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1871'. [ 335.145927][T13593] xt_ecn: cannot match TCP bits for non-tcp packets [ 335.263959][T13595] lo speed is unknown, defaulting to 1000 [ 335.488033][T13614] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 335.515141][T13617] IPVS: length: 239 != 24 [ 335.556610][T13619] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 335.669086][T13595] wg1 speed is unknown, defaulting to 1000 [ 335.681465][T13628] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.692470][T13628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.699700][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 335.706953][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 335.714170][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 335.723571][T13630] tc_dump_action: action bad kind [ 335.730416][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1883'. [ 335.944888][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1887'. [ 336.014719][T13647] x_tables: duplicate underflow at hook 1 [ 336.194490][T13661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.419995][T13679] validate_nla: 8 callbacks suppressed [ 336.420013][T13679] netlink: 'syz.6.1895': attribute type 21 has an invalid length. [ 336.489417][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1895'. [ 336.586123][T13681] macsec2: entered promiscuous mode [ 336.607023][T13681] bridge0: entered promiscuous mode [ 336.616462][T13681] macsec2: entered allmulticast mode [ 336.626285][T13681] bridge0: entered allmulticast mode [ 336.633420][T13681] bridge0: port 1(macsec2) entered blocking state [ 336.640824][T13681] bridge0: port 1(macsec2) entered disabled state [ 336.660882][T13681] bridge0: left allmulticast mode [ 336.667200][T13681] bridge0: left promiscuous mode [ 336.761957][T13691] bridge6: entered promiscuous mode [ 336.768452][T13691] bridge6: entered allmulticast mode [ 337.391279][T13736] netlink: 'syz.5.1912': attribute type 2 has an invalid length. [ 337.439759][T13736] netlink: 'syz.5.1912': attribute type 2 has an invalid length. [ 337.574068][T13746] geneve2: entered promiscuous mode [ 337.608870][T13746] geneve2: entered allmulticast mode [ 337.618577][T13752] netlink: ct family unspecified [ 337.626354][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.646440][T13752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.665434][ T3530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.674260][ T3530] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.695680][ T3530] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 337.757833][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1917'. [ 338.278690][T13799] tipc: Enabled bearer , priority 0 [ 338.294027][T13799] syzkaller0: entered promiscuous mode [ 338.306412][T13799] syzkaller0: entered allmulticast mode [ 338.359079][T13799] tipc: Resetting bearer [ 338.376795][T13798] tipc: Resetting bearer [ 338.411182][T13798] tipc: Disabling bearer [ 338.498796][T13806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.668772][T13832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.749317][T13836] netlink: 'syz.5.1937': attribute type 11 has an invalid length. [ 339.005570][T13854] openvswitch: netlink: Missing key (keys=40, expected=80) [ 339.302707][T13878] netlink: 'syz.9.1953': attribute type 10 has an invalid length. [ 339.312349][T13872] syzkaller1: entered promiscuous mode [ 339.320413][T13872] syzkaller1: entered allmulticast mode [ 339.338434][T13878] batadv0: left promiscuous mode [ 339.343822][T13878] netlink: 'syz.9.1953': attribute type 10 has an invalid length. [ 339.353160][T13878] netlink: 'syz.9.1953': attribute type 10 has an invalid length. [ 339.400774][T13878] netlink: 'syz.9.1953': attribute type 10 has an invalid length. [ 339.418991][T13878] netlink: 'syz.9.1953': attribute type 10 has an invalid length. [ 339.438670][T13878] netlink: 'syz.9.1953': attribute type 10 has an invalid length. [ 339.456812][T13878] netlink: 'syz.9.1953': attribute type 10 has an invalid length. [ 341.084925][T13896] __nla_validate_parse: 5 callbacks suppressed [ 341.084944][T13896] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1957'. [ 341.309253][T13914] team0: Device vti0 is of different type [ 341.642670][T13932] SET target dimension over the limit! [ 341.660004][T13933] validate_nla: 26 callbacks suppressed [ 341.660020][T13933] netlink: 'syz.9.1972': attribute type 10 has an invalid length. [ 341.688453][T13933] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 341.744738][T13937] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1973'. [ 341.799882][T13939] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 341.869733][T13945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.872107][T13946] netlink: 'syz.9.1975': attribute type 1 has an invalid length. [ 341.999937][T13955] xt_hashlimit: size too large, truncated to 1048576 [ 342.016934][T13954] xt_hashlimit: size too large, truncated to 1048576 [ 342.047500][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1980'. [ 342.636509][T14001] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1992'. [ 342.646012][T14001] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 342.757647][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1996'. [ 342.828587][T14019] netlink: 212324 bytes leftover after parsing attributes in process `syz.8.1998'. [ 343.022348][T14033] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2000'. [ 343.175587][T14046] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2008'. [ 343.299369][T14054] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2012'. [ 343.305036][T14053] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2011'. [ 343.461394][T14063] netlink: 'syz.9.2015': attribute type 14 has an invalid length. [ 343.590743][T14076] netlink: 'syz.7.2021': attribute type 10 has an invalid length. [ 343.603434][T14076] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 344.305723][T14089] Cannot find add_set index 1 as target [ 345.061942][T14083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.079096][T14083] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 345.116007][T14083] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.121952][T14083] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 345.154831][T14083] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.166199][T14140] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20004 [ 345.175909][T14083] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 345.195245][T14083] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 345.205712][T14083] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 345.288578][T14148] netlink: 'syz.7.2042': attribute type 1 has an invalid length. [ 345.850052][T14180] netlink: 'syz.7.2049': attribute type 1 has an invalid length. [ 345.893189][T14180] netlink: 'syz.7.2049': attribute type 3 has an invalid length. [ 345.936566][T14180] NCSI netlink: No device for ifindex 813332851 [ 346.107933][T14204] __nla_validate_parse: 11 callbacks suppressed [ 346.107952][T14204] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2055'. [ 346.331383][T14213] tipc: Enabled bearer , priority 0 [ 346.342003][T14213] syzkaller0: entered promiscuous mode [ 346.347845][T14213] syzkaller0: entered allmulticast mode [ 346.397512][T14213] tipc: Resetting bearer [ 346.424803][T14212] tipc: Resetting bearer [ 346.443830][T14212] tipc: Disabling bearer [ 346.677862][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2064'. [ 346.729074][T14234] bond4: Invalid ad_actor_system MAC address. [ 346.739439][T14234] bond4: option ad_actor_system: invalid value (1) [ 346.748438][T14234] bond4 (unregistering): Released all slaves [ 346.907778][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2067'. [ 346.956893][T14245] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2067'. [ 346.970174][T14245] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 346.986143][T14245] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2067'. [ 346.996001][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2067'. [ 347.208202][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2071'. [ 347.261275][T14258] team1: entered promiscuous mode [ 347.267220][T14258] team1: entered allmulticast mode [ 347.376782][T14268] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2075'. [ 347.603970][T14293] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2082'. [ 347.637367][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2082'. [ 347.727483][T14298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.800819][T14311] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003 [ 349.353050][T14356] netlink: 'syz.5.2101': attribute type 32 has an invalid length. [ 349.386275][T14356] bond1: Setting coupled_control to off (0) [ 349.464909][T14354] 8021q: adding VLAN 0 to HW filter on device bond6 [ 349.516150][T14360] syzkaller0: entered promiscuous mode [ 349.521654][T14360] syzkaller0: entered allmulticast mode [ 349.688773][T14377] netlink: 'syz.6.2107': attribute type 3 has an invalid length. [ 350.989520][T14477] netlink: 'syz.8.2136': attribute type 4 has an invalid length. [ 351.187820][T14483] __nla_validate_parse: 84 callbacks suppressed [ 351.187837][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2140'. [ 351.218805][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2139'. [ 351.270055][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2140'. [ 351.332130][T14490] IPVS: set_ctl: invalid protocol: 94 172.30.1.10:20004 [ 351.411065][T14499] syzkaller0: entered promiscuous mode [ 351.431549][T14499] syzkaller0: entered allmulticast mode [ 351.786828][T14525] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2151'. [ 351.821893][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2150'. [ 351.831417][T14519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.924381][T14531] Cannot find del_set index 49151 as target [ 352.005495][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2156'. [ 352.017947][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2156'. [ 352.080241][T14545] sctp: [Deprecated]: syz.5.2158 (pid 14545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.080241][T14545] Use struct sctp_sack_info instead [ 352.305190][T14567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2163'. [ 352.661552][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2168'. [ 352.772636][T14589] 8021q: VLANs not supported on ip_vti0 [ 353.625391][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2184'. [ 355.767084][T14692] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 355.970891][T14692] geneve2: left promiscuous mode [ 356.018432][T14698] tipc: Enabled bearer , priority 26 [ 356.034436][ T49] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.059216][ T49] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.069095][ T49] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.117732][ T49] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.145740][ T49] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.184543][ T49] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.192085][T14727] netlink: 'syz.6.2199': attribute type 23 has an invalid length. [ 356.253513][ T49] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.285396][ T49] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.323440][ T49] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.357343][ T49] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.378668][ T49] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.398519][ T49] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 356.456557][T14745] __nla_validate_parse: 6 callbacks suppressed [ 356.456575][T14745] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2206'. [ 356.559456][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2209'. [ 356.617078][T14759] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2210'. [ 356.666298][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2210'. [ 356.866081][T14772] wg2: entered promiscuous mode [ 356.882058][T14772] wg2: entered allmulticast mode [ 356.909813][T14786] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2214'. [ 356.922374][T14770] syzkaller1: entered promiscuous mode [ 356.949563][T14770] syzkaller1: entered allmulticast mode [ 357.193034][T14801] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2221'. [ 357.212812][T14807] vlan0: entered promiscuous mode [ 357.226686][T14807] vlan0: entered allmulticast mode [ 357.236502][T14807] hsr_slave_1: entered allmulticast mode [ 357.268313][T14813] netlink: 380 bytes leftover after parsing attributes in process `syz.8.2221'. [ 357.279598][T14803] netlink: 750 bytes leftover after parsing attributes in process `syz.8.2221'. [ 357.292131][T14801] netlink: 'syz.8.2221': attribute type 11 has an invalid length. [ 357.303444][T14815] netlink: 'syz.7.2224': attribute type 8 has an invalid length. [ 357.438663][T14827] netlink: 'syz.6.2227': attribute type 33 has an invalid length. [ 357.478504][T14812] lo speed is unknown, defaulting to 1000 [ 357.518519][T14827] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2227'. [ 357.532486][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2227'. [ 357.694700][T14812] wg1 speed is unknown, defaulting to 1000 [ 357.922583][T14835] netlink: 'syz.8.2231': attribute type 4 has an invalid length. [ 357.959761][T14849] tap0: tun_chr_ioctl cmd 1074025678 [ 357.982034][T14849] tap0: group set to 0 [ 357.999616][T14835] netlink: 'syz.8.2231': attribute type 4 has an invalid length. [ 358.509072][T14876] netlink: 'syz.8.2239': attribute type 5 has an invalid length. [ 358.536608][T14876] netlink: 'syz.8.2239': attribute type 10 has an invalid length. [ 358.562397][T14876] bridge0: port 4(team0) entered blocking state [ 358.604257][T14876] bridge0: port 4(team0) entered disabled state [ 358.625238][T14876] team0: entered allmulticast mode [ 358.634328][T14876] team_slave_0: entered allmulticast mode [ 358.640724][T14876] team_slave_1: entered allmulticast mode [ 358.650092][T14876] team0: entered promiscuous mode [ 358.657430][T14876] team_slave_0: entered promiscuous mode [ 358.665601][T14876] team_slave_1: entered promiscuous mode [ 359.072597][T14902] syzkaller1: entered promiscuous mode [ 359.090474][T14902] syzkaller1: entered allmulticast mode [ 359.220600][T14912] syzkaller0: entered promiscuous mode [ 359.240222][T14912] syzkaller0: entered allmulticast mode [ 359.518837][T14931] C: renamed from lo [ 359.724852][T14941] nbd: couldn't find a device at index 0 [ 359.731717][T14937] syzkaller1: entered promiscuous mode [ 359.743759][T14937] syzkaller1: entered allmulticast mode [ 359.769499][T14951] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 359.846188][T14953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.870421][T14954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.090622][T14966] netlink: 'syz.9.2272': attribute type 2 has an invalid length. [ 360.128578][T14951] team0: Port device team_slave_0 removed [ 360.140921][T14951] team0: Port device team_slave_1 removed [ 360.148125][T14951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.157454][T14951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.167443][T14951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.295042][T14961] C speed is unknown, defaulting to 1000 [ 360.487341][T14980] syzkaller0: entered promiscuous mode [ 360.494354][T14980] syzkaller0: entered allmulticast mode [ 360.817645][T14961] wg1 speed is unknown, defaulting to 1000 [ 361.413228][T15003] netlink: 'syz.5.2283': attribute type 21 has an invalid length. [ 361.422261][T15004] netlink: 'syz.5.2283': attribute type 21 has an invalid length. [ 361.616857][T15006] __nla_validate_parse: 8 callbacks suppressed [ 361.616874][T15006] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2284'. [ 361.632347][T15003] netlink: 'syz.5.2283': attribute type 5 has an invalid length. [ 361.645453][T15003] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2283'. [ 361.663157][T15004] netlink: 'syz.5.2283': attribute type 5 has an invalid length. [ 361.674634][T15004] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2283'. [ 361.990306][T15017] syzkaller0: entered promiscuous mode [ 362.005689][T15017] syzkaller0: entered allmulticast mode [ 362.554474][T15031] netlink: 'syz.5.2293': attribute type 21 has an invalid length. [ 362.585142][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2295'. [ 362.595419][T15031] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.615170][T15036] openvswitch: netlink: Flow key attr not present in new flow. [ 362.690893][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2295'. [ 362.713142][T15039] openvswitch: netlink: Flow key attr not present in new flow. [ 362.927082][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2300'. [ 362.937751][T15050] netlink: 'syz.8.2301': attribute type 10 has an invalid length. [ 362.950650][T15050] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 362.998012][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.009654][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.045191][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.073079][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.237143][T15068] erspan0: entered allmulticast mode [ 363.286073][T15072] syzkaller0: entered promiscuous mode [ 363.298037][T15072] syzkaller0: entered allmulticast mode [ 363.470309][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2308'. [ 363.479423][T15077] netlink: 'syz.5.2308': attribute type 3 has an invalid length. [ 363.986739][T15102] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 364.028706][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2316'. [ 364.303218][T15122] netlink: 'syz.8.2321': attribute type 1 has an invalid length. [ 364.441642][T15128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.520442][T15128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2324'. [ 364.529542][T15128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2324'. [ 364.824748][T15152] netlink: 'syz.5.2332': attribute type 8 has an invalid length. [ 364.979826][T15158] netlink: 'syz.7.2333': attribute type 16 has an invalid length. [ 365.236006][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.263538][T15158] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.669458][T15158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.711431][ T5949] C speed is unknown, defaulting to 1000 [ 365.716320][T15165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.718064][ T5949] sz1: Port: 1 Link ACTIVE [ 365.777518][ T3530] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 365.787909][ T3530] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 365.821870][ T3530] bond0: now running without any active interface! [ 365.859193][T14717] C speed is unknown, defaulting to 1000 [ 365.929357][T15175] x_tables: unsorted entry at hook 1 [ 366.081909][T15172] macvtap1: entered promiscuous mode [ 366.103653][T15172] vlan0: entered promiscuous mode [ 366.114259][T15172] macvtap1: entered allmulticast mode [ 366.124153][T15172] vlan0: entered allmulticast mode [ 366.134953][T15172] veth0_vlan: entered allmulticast mode [ 366.880092][T15220] validate_nla: 3 callbacks suppressed [ 366.880110][T15220] netlink: 'syz.6.2354': attribute type 1 has an invalid length. [ 367.059425][T15227] bond7: (slave ip6gretap1): making interface the new active one [ 367.105352][T15227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.162091][T15227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.210796][T15227] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 367.246542][T15233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.551907][T15255] __nla_validate_parse: 2 callbacks suppressed [ 367.551927][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2361'. [ 367.653862][T15257] netlink: 'syz.9.2364': attribute type 4 has an invalid length. [ 367.710009][T15264] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2364'. [ 367.779028][T15266] netlink: 'syz.6.2367': attribute type 10 has an invalid length. [ 367.798875][T15267] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2366'. [ 367.845582][T15266] bridge_slave_1: entered promiscuous mode [ 367.852314][T15266] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 367.924384][T15275] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2368'. [ 367.934634][T15276] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2369'. [ 368.044903][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2370'. [ 368.084285][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2370'. [ 368.108738][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2370'. [ 368.128803][T15287] netlink: 'syz.6.2372': attribute type 10 has an invalid length. [ 368.146369][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2370'. [ 368.259085][T15292] sctp: [Deprecated]: syz.7.2374 (pid 15292) Use of int in max_burst socket option deprecated. [ 368.259085][T15292] Use struct sctp_assoc_value instead [ 368.362223][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2373'. [ 368.414293][T15301] syzkaller0: entered promiscuous mode [ 368.419924][T15301] syzkaller0: entered allmulticast mode [ 369.013300][T15331] netlink: 'syz.5.2385': attribute type 1 has an invalid length. [ 369.819150][T15385] netlink: 'syz.8.2396': attribute type 1 has an invalid length. [ 369.898625][T15389] netlink: 'syz.7.2397': attribute type 33 has an invalid length. [ 369.963590][T15385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.004520][T15381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.059831][T15392] bond5: (slave geneve3): making interface the new active one [ 370.076997][T15392] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 370.300229][T15414] tipc: Enabled bearer , priority 0 [ 370.321353][T15414] syzkaller0: entered promiscuous mode [ 370.336258][T15414] syzkaller0: entered allmulticast mode [ 370.359825][T15414] nbd: must specify a size in bytes for the device [ 370.369132][T15414] veth1_macvtap: mtu less than device minimum [ 370.377579][T15412] tipc: Resetting bearer [ 370.408231][T15412] tipc: Disabling bearer [ 371.191293][T15478] : entered promiscuous mode [ 371.294599][T15525] netlink: 'syz.9.2420': attribute type 11 has an invalid length. [ 371.400151][T15536] bridge0: port 4(ipvlan2) entered blocking state [ 371.429584][T15536] bridge0: port 4(ipvlan2) entered disabled state [ 371.442370][T15536] ipvlan2: entered allmulticast mode [ 371.448895][T15536] bridge0: entered allmulticast mode [ 371.461664][T15536] ipvlan2: left allmulticast mode [ 371.467777][T15536] bridge0: left allmulticast mode [ 371.840172][T15552] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 371.958977][T15552] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 372.031216][T15566] tipc: Enabled bearer , priority 0 [ 372.039719][T15566] syzkaller0: entered promiscuous mode [ 372.045423][T15566] syzkaller0: entered allmulticast mode [ 372.080760][T15552] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 372.121793][T15566] tipc: Resetting bearer [ 372.131588][T15565] tipc: Resetting bearer [ 372.151783][T15565] tipc: Disabling bearer [ 372.216712][T15552] bond0: (slave netdevsim0): Releasing backup interface [ 372.244780][T15552] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 372.442805][T15582] netlink: 'syz.5.2433': attribute type 9 has an invalid length. [ 372.475157][T15531] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 372.596925][T15591] __nla_validate_parse: 22 callbacks suppressed [ 372.596942][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2438'. [ 372.632638][T15526] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 372.723985][T15523] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 372.781315][T15531] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 372.804261][T15606] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2440'. [ 372.856338][T15610] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2439'. [ 372.937562][T15597] xt_bpf: check failed: parse error [ 373.267547][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2446'. [ 373.321718][T15646] netlink: 'syz.6.2446': attribute type 29 has an invalid length. [ 373.350786][T15646] netlink: 'syz.6.2446': attribute type 29 has an invalid length. [ 373.438847][T15653] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2446'. [ 373.493244][T15656] netlink: 696 bytes leftover after parsing attributes in process `syz.5.2452'. [ 373.613939][T15663] syzkaller1: entered promiscuous mode [ 373.619786][T15663] syzkaller1: entered allmulticast mode [ 373.753641][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2457'. [ 373.764470][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2457'. [ 373.773740][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2457'. [ 373.790771][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2457'. [ 374.370011][T15719] : entered promiscuous mode [ 374.871777][T15756] delete_channel: no stack [ 375.914533][T15818] netlink: 'syz.5.2495': attribute type 1 has an invalid length. [ 375.929844][T15818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.032596][T15823] netlink: 'syz.7.2496': attribute type 9 has an invalid length. [ 376.041093][T15823] netlink: 'syz.7.2496': attribute type 6 has an invalid length. [ 376.082509][T15821] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.093721][T15821] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.166811][T15821] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.177401][T15821] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.218565][T15833] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 376.323810][T15821] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.349848][T15840] netlink: 'syz.8.2502': attribute type 21 has an invalid length. [ 376.361068][T15821] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.427915][T15840] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 376.442174][T15840] bond7 (unregistering): Released all slaves [ 376.498394][T15821] bond0: (slave netdevsim0): Releasing backup interface [ 376.507335][T15821] bond0: (slave netdevsim0): the permanent HWaddr of slave - 96:f6:e3:62:98:6d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 376.563669][T15821] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 376.738352][T15857] rdma_rxe: rxe_newlink: failed to add team0 [ 376.775751][T15523] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.784108][T15523] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.795768][T15866] !: renamed from dummy0 [ 376.863576][T15523] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.876546][T15523] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.935444][T15523] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.945459][T15523] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.984519][T15523] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.995604][T15523] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.164511][T15887] syzkaller1: entered promiscuous mode [ 377.170229][T15887] syzkaller1: entered allmulticast mode [ 377.178156][T15887] netlink: 'syz.8.2513': attribute type 1 has an invalid length. [ 377.502360][T15913] netlink: 'syz.6.2525': attribute type 7 has an invalid length. [ 377.518738][T15913] netlink: 'syz.6.2525': attribute type 8 has an invalid length. [ 377.854104][T15945] __nla_validate_parse: 18 callbacks suppressed [ 377.854122][T15945] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2532'. [ 377.875533][T15945] netlink: 21 bytes leftover after parsing attributes in process `syz.6.2532'. [ 377.911483][T15945] netlink: 21 bytes leftover after parsing attributes in process `syz.6.2532'. [ 377.974621][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2532'. [ 378.098905][T15965] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2536'. [ 378.130809][T15966] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2536'. [ 378.244778][T15972] netlink: 696 bytes leftover after parsing attributes in process `syz.8.2537'. [ 378.479300][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2540'. [ 378.498394][T15985] C speed is unknown, defaulting to 1000 [ 378.554939][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.557102][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2542'. [ 378.583900][T15987] tipc: Enabled bearer , priority 0 [ 378.702893][T15982] tipc: Disabling bearer [ 378.730123][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2547'. [ 378.749977][T16001] netlink: 'syz.6.2545': attribute type 4 has an invalid length. [ 378.756648][T15526] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.775444][T15526] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.825927][T15526] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.841047][T15526] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.030296][T16017] bond7: option all_slaves_active: invalid value (222) [ 379.067427][T16017] bond7 (unregistering): Released all slaves [ 379.085136][T16026] netlink: 'syz.8.2555': attribute type 1 has an invalid length. [ 379.094082][T16026] netlink: 'syz.8.2555': attribute type 1 has an invalid length. [ 379.137019][T16029] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 379.152168][T16026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.308999][T16044] sctp: [Deprecated]: syz.8.2560 (pid 16044) Use of int in max_burst socket option. [ 379.308999][T16044] Use struct sctp_assoc_value instead [ 379.335222][T16046] netlink: 'syz.6.2561': attribute type 23 has an invalid length. [ 379.390160][T16054] Bluetooth: MGMT ver 1.23 [ 379.448031][T16044] syzkaller0: entered promiscuous mode [ 379.453840][T16044] syzkaller0: entered allmulticast mode [ 379.490169][T16056] xt_TCPMSS: Only works on TCP SYN packets [ 379.644131][T16066] tipc: Enabling of bearer rejected, failed to enable media [ 379.870408][T16088] chnl_net:caif_netlink_parms(): no params data found [ 380.276770][T16112] sit0: Caught tx_queue_len zero misconfig [ 380.361053][T16121] netlink: 'syz.8.2579': attribute type 1 has an invalid length. [ 380.375493][T16121] netlink: 'syz.8.2579': attribute type 4 has an invalid length. [ 380.412798][T16125] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 380.430235][T16125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.454876][T16132] netlink: 'syz.8.2584': attribute type 10 has an invalid length. [ 380.508912][T16133] syzkaller0: entered promiscuous mode [ 380.514525][T16133] syzkaller0: entered allmulticast mode [ 380.524534][T16132] bridge_slave_1: left allmulticast mode [ 380.532600][T16132] bridge_slave_1: left promiscuous mode [ 380.538587][T16132] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.577964][T16132] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 380.653484][T16147] sctp: [Deprecated]: syz.8.2587 (pid 16147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.653484][T16147] Use struct sctp_sack_info instead [ 381.967925][T16158] bond2: entered promiscuous mode [ 381.973253][T16158] bond2: entered allmulticast mode [ 381.979297][T16158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.074832][T16171] netlink: 'syz.8.2592': attribute type 29 has an invalid length. [ 382.195093][T16189] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 382.222650][T16186] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.273821][T16196] bond7: (slave gretap1): making interface the new active one [ 382.285844][T16196] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 382.525920][T16202] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 382.537797][T16202] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 382.642986][T16214] bond7: (slave bridge5): Enslaving as an active interface with a down link [ 382.718757][T16221] bond7: (slave gretap2): making interface the new active one [ 382.756338][T16221] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 382.864246][T16231] bond8: entered allmulticast mode [ 382.875963][T16231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.908654][T16241] __nla_validate_parse: 22 callbacks suppressed [ 382.908671][T16241] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2612'. [ 383.139669][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2618'. [ 383.175453][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2614'. [ 383.255632][T16264] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2619'. [ 383.532308][T16297] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2627'. [ 383.656684][T16300] wg2: left promiscuous mode [ 383.693247][T16300] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 383.708733][T16300] veth5: left promiscuous mode [ 383.714252][T16300] gretap1: left promiscuous mode [ 383.826680][T16300] vlan0: left promiscuous mode [ 383.866835][T15520] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.879874][T15520] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.924666][T15520] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.955649][T15520] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.101024][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2633'. [ 384.124224][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2633'. [ 384.377457][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2639'. [ 384.447527][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2639'. [ 384.574733][T16346] bond9: Invalid ad_actor_system MAC address. [ 384.581046][T16346] bond9: option ad_actor_system: invalid value (1) [ 384.625384][T16348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.667279][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2641'. [ 384.700293][T16346] bond9 (unregistering): Released all slaves [ 384.726193][T16357] validate_nla: 7 callbacks suppressed [ 384.726211][T16357] netlink: 'syz.9.2641': attribute type 15 has an invalid length. [ 384.812297][T16363] xt_cgroup: path and classid specified [ 384.921074][T16370] netlink: 'syz.5.2647': attribute type 21 has an invalid length. [ 384.991243][T16376] xt_limit: Overflow, try lower: 604147548/4200216962 [ 385.212284][T16389] netlink: 'syz.9.2645': attribute type 13 has an invalid length. [ 385.225968][T16389] netlink: 'syz.9.2645': attribute type 27 has an invalid length. [ 385.421881][T16390] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 385.429558][T16390] syzkaller1: Refused to change device type [ 385.649605][T16424] tipc: New replicast peer: 255.255.255.255 [ 385.666723][T16424] tipc: Enabled bearer , priority 10 [ 385.678540][T16424] netlink: 'syz.7.2659': attribute type 1 has an invalid length. [ 385.776430][T16436] siw: device registration error -23 [ 385.915060][T16454] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 385.945724][T16452] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.596866][T16506] netlink: 'syz.5.2674': attribute type 18 has an invalid length. [ 386.775721][ T5903] tipc: Node number set to 4165722571 [ 386.927236][T16523] netlink: 'syz.6.2680': attribute type 12 has an invalid length. [ 386.951196][T16523] netlink: 'syz.6.2680': attribute type 12 has an invalid length. [ 387.030695][T16527] bond8: option all_slaves_active: invalid value (222) [ 387.041183][T16527] bond8 (unregistering): Released all slaves [ 387.297717][T16542] siw: device registration error -23 [ 387.931300][T16582] macsec0: entered promiscuous mode [ 387.955412][T16582] macsec0: entered allmulticast mode [ 387.998644][T16582] veth1_macvtap: entered allmulticast mode [ 388.004514][T16582] veth1_macvtap: entered promiscuous mode [ 388.032517][T16587] __nla_validate_parse: 22 callbacks suppressed [ 388.032533][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2696'. [ 388.051299][T16582] macsec0: left promiscuous mode [ 388.056784][T16582] veth1_macvtap: left promiscuous mode [ 388.085102][T16582] macsec0: left allmulticast mode [ 388.108108][T16584] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2695'. [ 388.116869][T16582] veth1_macvtap: left allmulticast mode [ 388.412592][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2707'. [ 388.431962][T16609] netlink: 'syz.5.2704': attribute type 32 has an invalid length. [ 388.452347][T16610] netlink: 'syz.9.2707': attribute type 21 has an invalid length. [ 388.475477][T16610] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.483330][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2704'. [ 388.516135][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2710'. [ 388.646710][T16609] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 388.816108][T16637] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:51879 [ 389.016795][T14720] C speed is unknown, defaulting to 1000 [ 389.031494][T14720] C speed is unknown, defaulting to 1000 [ 389.039640][T14717] C speed is unknown, defaulting to 1000 [ 389.220953][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2724'. [ 389.230244][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2723'. [ 389.261769][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2724'. [ 389.758950][T16705] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2737'. [ 389.890507][T16710] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2738'. [ 389.956566][T16726] xt_limit: Overflow, try lower: 271964/0 [ 390.269420][T16741] openvswitch: netlink: Message has 4 unknown bytes. [ 390.289145][T16741] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 390.492810][T16761] validate_nla: 2 callbacks suppressed [ 390.492828][T16761] netlink: 'syz.5.2754': attribute type 32 has an invalid length. [ 390.611334][T16761] bond3: option coupled_control: invalid value (52) [ 390.634390][T16772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.635116][T16761] bond3 (unregistering): Released all slaves [ 390.891621][T16789] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 391.372213][T16816] netlink: 'syz.8.2773': attribute type 9 has an invalid length. [ 391.709289][T16850] tipc: Enabled bearer , priority 0 [ 391.717826][T16850] syzkaller0: entered promiscuous mode [ 391.723461][T16850] syzkaller0: entered allmulticast mode [ 391.782786][T16850] tipc: Resetting bearer [ 391.814965][T16846] tipc: Resetting bearer [ 391.860998][T16846] tipc: Disabling bearer [ 392.052641][T16872] netlink: 'syz.6.2790': attribute type 3 has an invalid length. [ 392.064140][T16873] netlink: 'syz.6.2790': attribute type 3 has an invalid length. [ 392.152748][T16881] netlink: 'syz.6.2792': attribute type 10 has an invalid length. [ 392.162570][T16863] vlan0: left allmulticast mode [ 392.167770][T16863] veth0_vlan: left allmulticast mode [ 392.173133][T16863] vlan0: left promiscuous mode [ 392.196001][ T5949] C speed is unknown, defaulting to 1000 [ 392.215628][T15526] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 392.224316][ T5949] sz1: Port: 1 Link DOWN [ 392.230417][T15526] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 392.250161][ T5949] C speed is unknown, defaulting to 1000 [ 392.268107][T15526] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 392.287768][T15526] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 392.375049][T16892] nbd: couldn't find a device at index 0 [ 392.477406][T16898] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 392.485653][ T5848] block nbd3: Receive control failed (result -32) [ 392.719858][T16923] tipc: Enabled bearer , priority 0 [ 392.728184][T16920] syzkaller0: entered promiscuous mode [ 392.733677][T16920] syzkaller0: entered allmulticast mode [ 392.807257][T16920] tipc: Resetting bearer [ 392.867028][T16920] tipc: Disabling bearer [ 393.204208][T16962] netlink: 'syz.7.2817': attribute type 1 has an invalid length. [ 393.236551][T16962] __nla_validate_parse: 18 callbacks suppressed [ 393.236568][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2817'. [ 393.277631][T16967] tipc: Enabled bearer , priority 10 [ 393.284881][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2817'. [ 393.350391][T16975] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2819'. [ 393.381250][T16972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.393147][T16973] vlan1: entered allmulticast mode [ 393.398555][T16973] bond3: entered allmulticast mode [ 393.420305][T16978] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 393.594948][T16992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.668859][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2827'. [ 393.677677][T16998] syzkaller0: entered promiscuous mode [ 393.683686][T16998] syzkaller0: entered allmulticast mode [ 393.722026][T16998] netlink: 'syz.7.2828': attribute type 8 has an invalid length. [ 393.979512][T17017] macsec0: entered promiscuous mode [ 393.991069][T17017] macsec0: entered allmulticast mode [ 394.263755][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2841'. [ 394.278823][T17033] Unsupported xt match [ 394.278840][T17033] unable to load match [ 394.370406][T17041] tipc: Bearer : already 2 bearers with priority 10 [ 394.382020][T17041] tipc: Bearer : trying with adjusted priority [ 394.391953][T17041] tipc: New replicast peer: 255.255.255.255 [ 394.403349][T17041] tipc: Enabled bearer , priority 9 [ 395.275651][T17097] lo: Caught tx_queue_len zero misconfig [ 395.294366][T17108] netlink: 'syz.8.2860': attribute type 10 has an invalid length. [ 395.434195][T17087] syzkaller0: entered promiscuous mode [ 395.441237][T17087] syzkaller0: entered allmulticast mode [ 395.904999][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2867'. [ 397.373919][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2877'. [ 397.407573][T17175] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2877'. [ 397.518906][T17190] netlink: 'syz.8.2879': attribute type 10 has an invalid length. [ 397.527100][T17190] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2879'. [ 397.549630][T17190] geneve0: entered promiscuous mode [ 397.563253][T17190] geneve0: entered allmulticast mode [ 397.570045][T17190] team0: Port device geneve0 added [ 397.597947][T17195] vlan1: entered allmulticast mode [ 397.603268][T17195] hsr0: entered allmulticast mode [ 397.609096][T17195] hsr_slave_0: entered allmulticast mode [ 397.744033][T17202] netlink: 'syz.6.2886': attribute type 10 has an invalid length. [ 397.890890][T17225] sctp: [Deprecated]: syz.7.2888 (pid 17225) Use of int in maxseg socket option. [ 397.890890][T17225] Use struct sctp_assoc_value instead [ 398.204451][T17250] tipc: MTU too low for tipc bearer [ 398.348770][T17255] bridge0: port 2(ipvlan2) entered blocking state [ 398.357014][T17255] bridge0: port 2(ipvlan2) entered disabled state [ 398.364576][T17255] ipvlan2: entered allmulticast mode [ 398.371234][T17255] bridge0: entered allmulticast mode [ 398.379736][T17255] ipvlan2: left allmulticast mode [ 398.384899][T17255] bridge0: left allmulticast mode [ 398.587585][T17273] netlink: 'syz.6.2905': attribute type 3 has an invalid length. [ 398.689007][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2906'. [ 398.714380][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2906'. [ 398.869391][T17291] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2910'. [ 398.978482][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2895'. [ 399.064601][T17306] netlink: 'syz.7.2914': attribute type 3 has an invalid length. [ 399.394215][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2919'. [ 399.623316][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2920'. [ 399.756678][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2924'. [ 399.802114][T17349] netlink: 'syz.6.2926': attribute type 12 has an invalid length. [ 399.837884][T17349] netlink: 'syz.6.2926': attribute type 12 has an invalid length. [ 400.030265][T17370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2931'. [ 400.106262][T17366] bond9: ARP target 1.0.0.0 is already present [ 400.112587][T17366] bond9: option arp_ip_target: invalid value (1) [ 400.121967][T17366] bond9 (unregistering): Released all slaves [ 400.231557][T17381] syzkaller0: entered promiscuous mode [ 400.245936][T17381] syzkaller0: entered allmulticast mode [ 400.316112][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2936'. [ 400.550199][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2938'. [ 400.791651][T17411] netlink: 'syz.5.2942': attribute type 1 has an invalid length. [ 400.897535][T17411] bond4: entered promiscuous mode [ 400.902644][T17411] bond4: entered allmulticast mode [ 400.916808][T17411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.971548][T17417] macvlan4: entered promiscuous mode [ 400.983750][T17417] macvlan4: entered allmulticast mode [ 401.034325][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.042219][T17417] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 401.043602][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.060339][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.068759][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.076603][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.091399][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.100076][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.107535][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.118017][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.127984][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.184142][T17424] C speed is unknown, defaulting to 1000 [ 401.740246][T17446] syzkaller0: entered promiscuous mode [ 401.753086][T17446] syzkaller0: entered allmulticast mode [ 401.765784][T17455] tipc: Enabled bearer , priority 0 [ 401.776424][T17424] wg1 speed is unknown, defaulting to 1000 [ 401.789119][T17445] tipc: Resetting bearer [ 402.336686][T17493] RDS: rds_bind could not find a transport for fe80::43, load rds_tcp or rds_rdma? [ 403.188205][ T5840] Bluetooth: hci3: command tx timeout [ 403.383643][T17445] tipc: Disabling bearer [ 403.427783][T17487] bridge4: port 1(veth13) entered blocking state [ 403.434263][T17487] bridge4: port 1(veth13) entered disabled state [ 403.443126][T17487] veth13: entered allmulticast mode [ 403.450058][T17487] veth13: entered promiscuous mode [ 403.475027][T17490] bridge4: port 2(veth15) entered blocking state [ 403.481598][T17490] bridge4: port 2(veth15) entered disabled state [ 403.488220][T17490] veth15: entered allmulticast mode [ 403.500639][T17490] veth15: entered promiscuous mode [ 403.622724][T17506] sctp: [Deprecated]: syz.9.2965 (pid 17506) Use of int in maxseg socket option. [ 403.622724][T17506] Use struct sctp_assoc_value instead [ 403.701325][T17506] __nla_validate_parse: 6 callbacks suppressed [ 403.701343][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2965'. [ 403.920559][T17521] sch_fq: defrate 0 ignored. [ 403.929542][T17424] chnl_net:caif_netlink_parms(): no params data found [ 404.087520][T17526] syzkaller0: entered promiscuous mode [ 404.097946][T17526] syzkaller0: entered allmulticast mode [ 404.106913][T17526] netlink: 'syz.6.2972': attribute type 7 has an invalid length. [ 404.114742][T17526] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2972'. [ 404.162158][T17534] dvmrp0: entered allmulticast mode [ 404.317443][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.324815][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.333488][T17424] bridge_slave_0: entered allmulticast mode [ 404.341574][T17424] bridge_slave_0: entered promiscuous mode [ 404.361646][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2976'. [ 404.394679][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.403464][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.413237][T17424] bridge_slave_1: entered allmulticast mode [ 404.423266][T17424] bridge_slave_1: entered promiscuous mode [ 404.448308][T17558] pim6reg1: entered promiscuous mode [ 404.448382][T17554] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2978'. [ 404.454046][T17552] netlink: 'syz.9.2976': attribute type 10 has an invalid length. [ 404.471048][T17558] pim6reg1: entered allmulticast mode [ 404.556537][T17424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.601118][T17424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.801232][T17424] team0: Port device team_slave_0 added [ 404.814282][T17424] team0: Port device team_slave_1 added [ 404.868495][T17580] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 404.880145][T17424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.887714][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.914754][T17424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.936200][T17424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.943162][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.971527][T17424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.130982][T17598] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 405.139228][T17598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.144322][T17424] hsr_slave_0: entered promiscuous mode [ 405.157016][T17424] hsr_slave_1: entered promiscuous mode [ 405.180754][T17424] debugfs: 'hsr0' already exists in 'hsr' [ 405.189105][T17424] Cannot create hsr debugfs directory [ 405.265628][ T5840] Bluetooth: hci3: command tx timeout [ 405.293277][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2990'. [ 405.432438][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2992'. [ 405.442231][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2992'. [ 405.471915][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2992'. [ 405.481036][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2992'. [ 405.493102][T17617] FAULT_INJECTION: forcing a failure. [ 405.493102][T17617] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 405.506507][T17617] CPU: 0 UID: 0 PID: 17617 Comm: syz.5.2993 Not tainted syzkaller #0 PREEMPT(full) [ 405.506531][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.506548][T17617] Call Trace: [ 405.506555][T17617] [ 405.506562][T17617] dump_stack_lvl+0x189/0x250 [ 405.506586][T17617] ? __pfx____ratelimit+0x10/0x10 [ 405.506604][T17617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.506620][T17617] ? __pfx__printk+0x10/0x10 [ 405.506634][T17617] ? __might_fault+0xb0/0x130 [ 405.506660][T17617] should_fail_ex+0x414/0x560 [ 405.506683][T17617] _copy_from_user+0x2d/0xb0 [ 405.506700][T17617] ___sys_sendmsg+0x158/0x2a0 [ 405.506717][T17617] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.506760][T17617] ? __fget_files+0x2a/0x420 [ 405.506771][T17617] ? __fget_files+0x3a0/0x420 [ 405.506791][T17617] __x64_sys_sendmsg+0x19b/0x260 [ 405.506807][T17617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.506828][T17617] ? __pfx_ksys_write+0x10/0x10 [ 405.506848][T17617] ? do_syscall_64+0xbe/0xfa0 [ 405.506869][T17617] do_syscall_64+0xfa/0xfa0 [ 405.506884][T17617] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.506901][T17617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.506913][T17617] ? clear_bhb_loop+0x60/0xb0 [ 405.506929][T17617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.506944][T17617] RIP: 0033:0x7f2f0e58f6c9 [ 405.506958][T17617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.506969][T17617] RSP: 002b:00007f2f0f40a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.506984][T17617] RAX: ffffffffffffffda RBX: 00007f2f0e7e5fa0 RCX: 00007f2f0e58f6c9 [ 405.506993][T17617] RDX: 0000000004008488 RSI: 00002000000000c0 RDI: 0000000000000004 [ 405.507001][T17617] RBP: 00007f2f0f40a090 R08: 0000000000000000 R09: 0000000000000000 [ 405.507009][T17617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.507016][T17617] R13: 00007f2f0e7e6038 R14: 00007f2f0e7e5fa0 R15: 00007fff7486b818 [ 405.507039][T17617] [ 405.729508][T17424] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.761334][T17424] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.961731][T17424] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.972880][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2997'. [ 405.986686][T17424] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.085982][T17424] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.105417][T17424] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.316826][T17424] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.333125][T17424] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.350499][T17657] FAULT_INJECTION: forcing a failure. [ 406.350499][T17657] name failslab, interval 1, probability 0, space 0, times 1 [ 406.381061][T17657] CPU: 1 UID: 0 PID: 17657 Comm: syz.9.3004 Not tainted syzkaller #0 PREEMPT(full) [ 406.381085][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.381096][T17657] Call Trace: [ 406.381103][T17657] [ 406.381111][T17657] dump_stack_lvl+0x189/0x250 [ 406.381137][T17657] ? __pfx____ratelimit+0x10/0x10 [ 406.381160][T17657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.381180][T17657] ? __pfx__printk+0x10/0x10 [ 406.381202][T17657] ? __pfx___might_resched+0x10/0x10 [ 406.381221][T17657] ? fs_reclaim_acquire+0x7d/0x100 [ 406.381250][T17657] should_fail_ex+0x414/0x560 [ 406.381280][T17657] should_failslab+0xa8/0x100 [ 406.381299][T17657] kmem_cache_alloc_node_noprof+0x77/0x710 [ 406.381322][T17657] ? __alloc_skb+0x112/0x2d0 [ 406.381336][T17657] ? netlink_autobind+0xdb/0x300 [ 406.381360][T17657] __alloc_skb+0x112/0x2d0 [ 406.381380][T17657] netlink_sendmsg+0x5c6/0xb30 [ 406.381407][T17657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.381435][T17657] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.381462][T17657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.381479][T17657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.381497][T17657] __sock_sendmsg+0x21c/0x270 [ 406.381522][T17657] ____sys_sendmsg+0x505/0x830 [ 406.381547][T17657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.381575][T17657] ? import_iovec+0x74/0xa0 [ 406.381600][T17657] ___sys_sendmsg+0x21f/0x2a0 [ 406.381622][T17657] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.381678][T17657] ? __fget_files+0x2a/0x420 [ 406.381694][T17657] ? __fget_files+0x3a0/0x420 [ 406.381720][T17657] __x64_sys_sendmsg+0x19b/0x260 [ 406.381743][T17657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.381772][T17657] ? __pfx_ksys_write+0x10/0x10 [ 406.381799][T17657] ? do_syscall_64+0xbe/0xfa0 [ 406.381826][T17657] do_syscall_64+0xfa/0xfa0 [ 406.381847][T17657] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.381870][T17657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.381886][T17657] ? clear_bhb_loop+0x60/0xb0 [ 406.381908][T17657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.381925][T17657] RIP: 0033:0x7f26fdf8f6c9 [ 406.381941][T17657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.381956][T17657] RSP: 002b:00007f26fee64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.381975][T17657] RAX: ffffffffffffffda RBX: 00007f26fe1e5fa0 RCX: 00007f26fdf8f6c9 [ 406.381989][T17657] RDX: 0000000004008488 RSI: 00002000000000c0 RDI: 0000000000000004 [ 406.382001][T17657] RBP: 00007f26fee64090 R08: 0000000000000000 R09: 0000000000000000 [ 406.382012][T17657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.382023][T17657] R13: 00007f26fe1e6038 R14: 00007f26fe1e5fa0 R15: 00007fffb87ab488 [ 406.382053][T17657] [ 406.973553][T17678] team0: Device vti0 is of different type [ 407.131013][T17689] netlink: 'syz.5.3010': attribute type 1 has an invalid length. [ 407.193265][T17689] bond5: (slave bridge9): making interface the new active one [ 407.201963][T17689] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 407.218093][T17424] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 407.249148][T17424] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 407.265901][T17424] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 407.293106][T17424] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 407.320804][T17694] netlink: 'syz.7.3012': attribute type 1 has an invalid length. [ 407.358790][ T5840] Bluetooth: hci3: command tx timeout [ 407.474659][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.501267][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.518562][T15521] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.525755][T15521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.558292][T15529] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.565497][T15529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.632012][T17711] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 407.645931][T17711] bond9: entered promiscuous mode [ 407.651476][T17711] bond9: entered allmulticast mode [ 407.665999][T17711] 8021q: adding VLAN 0 to HW filter on device bond9 [ 408.134708][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.155475][T17744] netlink: 'syz.7.3024': attribute type 83 has an invalid length. [ 408.355107][T17757] netlink: 'syz.7.3029': attribute type 3 has an invalid length. [ 408.570934][T17768] x_tables: duplicate underflow at hook 4 [ 408.657932][T17424] veth0_vlan: entered promiscuous mode [ 408.702089][T17424] veth1_vlan: entered promiscuous mode [ 408.715087][T17776] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 408.724923][T17776] netlink: 'syz.9.3037': attribute type 12 has an invalid length. [ 408.789851][T17783] __nla_validate_parse: 6 callbacks suppressed [ 408.789868][T17783] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3035'. [ 408.797043][T17780] syzkaller0: entered promiscuous mode [ 408.811767][T17780] syzkaller0: entered allmulticast mode [ 408.822439][T17783] netlink: 'syz.7.3035': attribute type 7 has an invalid length. [ 408.827198][T17424] veth0_macvtap: entered promiscuous mode [ 408.835568][T17783] netlink: 'syz.7.3035': attribute type 8 has an invalid length. [ 408.845034][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3035'. [ 408.888813][T17424] veth1_macvtap: entered promiscuous mode [ 408.992376][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.031233][T17792] netlink: 576 bytes leftover after parsing attributes in process `syz.7.3041'. [ 409.044346][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.079848][T15520] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.147394][T15520] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.150188][T17796] netlink: zone id is out of range [ 409.161732][T15520] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.190060][T15520] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.195795][T17796] netlink: zone id is out of range [ 409.219280][T17796] netlink: zone id is out of range [ 409.230551][T17796] netlink: zone id is out of range [ 409.233426][T17798] batadv2: entered allmulticast mode [ 409.239697][T17796] netlink: zone id is out of range [ 409.247005][T17796] netlink: zone id is out of range [ 409.252656][T17796] netlink: zone id is out of range [ 409.257948][T17796] netlink: zone id is out of range [ 409.334783][T15522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.355490][T15522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.434702][ T5840] Bluetooth: hci3: command tx timeout [ 409.490297][T15520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.504886][T15520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.511317][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3050'. [ 409.520400][T17807] tipc: Enabling of bearer rejected, failed to enable media [ 409.596292][T17817] netlink: 'syz.8.2937': attribute type 10 has an invalid length. [ 409.614029][T17817] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.621781][T17817] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.637329][T17817] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.644555][T17817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.652114][T17817] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.659309][T17817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.673959][T17817] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 410.187109][T17844] FAULT_INJECTION: forcing a failure. [ 410.187109][T17844] name failslab, interval 1, probability 0, space 0, times 0 [ 410.233998][T17844] CPU: 0 UID: 0 PID: 17844 Comm: syz.6.3059 Not tainted syzkaller #0 PREEMPT(full) [ 410.234029][T17844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.234039][T17844] Call Trace: [ 410.234046][T17844] [ 410.234054][T17844] dump_stack_lvl+0x189/0x250 [ 410.234082][T17844] ? __pfx____ratelimit+0x10/0x10 [ 410.234102][T17844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.234123][T17844] ? __pfx__printk+0x10/0x10 [ 410.234145][T17844] ? __pfx___might_resched+0x10/0x10 [ 410.234166][T17844] should_fail_ex+0x414/0x560 [ 410.234195][T17844] should_failslab+0xa8/0x100 [ 410.234214][T17844] kmem_cache_alloc_node_noprof+0x77/0x710 [ 410.234237][T17844] ? __alloc_skb+0x112/0x2d0 [ 410.234259][T17844] __alloc_skb+0x112/0x2d0 [ 410.234279][T17844] netlink_ack+0x146/0xa50 [ 410.234305][T17844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.234327][T17844] ? ref_tracker_free+0x63a/0x7d0 [ 410.234343][T17844] ? __asan_memcpy+0x40/0x70 [ 410.234364][T17844] ? __pfx_ref_tracker_free+0x10/0x10 [ 410.234393][T17844] netlink_rcv_skb+0x28c/0x470 [ 410.234411][T17844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.234436][T17844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.234471][T17844] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.234497][T17844] netlink_unicast+0x82f/0x9e0 [ 410.234529][T17844] ? __pfx_netlink_unicast+0x10/0x10 [ 410.234554][T17844] ? netlink_sendmsg+0x642/0xb30 [ 410.234568][T17844] ? skb_put+0x11b/0x210 [ 410.234589][T17844] netlink_sendmsg+0x805/0xb30 [ 410.234616][T17844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.234636][T17844] ? aa_sock_msg_perm+0xf1/0x1d0 [ 410.234661][T17844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.234677][T17844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.234696][T17844] __sock_sendmsg+0x21c/0x270 [ 410.234721][T17844] ____sys_sendmsg+0x505/0x830 [ 410.234746][T17844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.234772][T17844] ? import_iovec+0x74/0xa0 [ 410.234797][T17844] ___sys_sendmsg+0x21f/0x2a0 [ 410.234819][T17844] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.234874][T17844] ? __fget_files+0x2a/0x420 [ 410.234890][T17844] ? __fget_files+0x3a0/0x420 [ 410.234918][T17844] __x64_sys_sendmsg+0x19b/0x260 [ 410.234939][T17844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.234966][T17844] ? __pfx_ksys_write+0x10/0x10 [ 410.234993][T17844] ? do_syscall_64+0xbe/0xfa0 [ 410.235024][T17844] do_syscall_64+0xfa/0xfa0 [ 410.235045][T17844] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.235068][T17844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.235085][T17844] ? clear_bhb_loop+0x60/0xb0 [ 410.235105][T17844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.235122][T17844] RIP: 0033:0x7fd02718f6c9 [ 410.235138][T17844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.235152][T17844] RSP: 002b:00007fd027f73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.235171][T17844] RAX: ffffffffffffffda RBX: 00007fd0273e5fa0 RCX: 00007fd02718f6c9 [ 410.235184][T17844] RDX: 0000000004008488 RSI: 00002000000000c0 RDI: 0000000000000004 [ 410.235196][T17844] RBP: 00007fd027f73090 R08: 0000000000000000 R09: 0000000000000000 [ 410.235206][T17844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.235216][T17844] R13: 00007fd0273e6038 R14: 00007fd0273e5fa0 R15: 00007ffef8f1c208 [ 410.235247][T17844] [ 410.256035][T17846] netlink: 'syz.8.3060': attribute type 1 has an invalid length. [ 410.583675][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.600072][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.612925][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.640347][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.649172][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 410.704323][T15529] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.795720][T15529] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.841312][T17850] C speed is unknown, defaulting to 1000 [ 410.890573][T15529] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.044215][T17867] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3066'. [ 411.072387][T15529] batman_adv: batadv0: Removing interface: netdevsim0 [ 411.102703][T15529] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.120662][T17877] netlink: 'syz.6.3069': attribute type 1 has an invalid length. [ 411.387873][T17895] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3070'. [ 411.438985][T17880] team0: Device wireguard0 is of different type [ 411.501666][T17885] syzkaller1: entered promiscuous mode [ 411.507286][T17885] syzkaller1: entered allmulticast mode [ 411.511235][T17850] wg1 speed is unknown, defaulting to 1000 [ 411.516445][T17901] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3075'. [ 411.550349][T17901] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3075'. [ 411.627295][T17911] netlink: 'syz.9.3076': attribute type 8 has an invalid length. [ 411.667398][T17911] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3076'. [ 411.861987][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3078'. [ 412.013804][T15529] tipc: Disabling bearer [ 412.496464][T15529] bond5 (unregistering): (slave bridge9): Releasing active interface [ 412.539064][T15529] bond0 (unregistering): Released all slaves [ 412.553795][T15529] bond1 (unregistering): Released all slaves [ 412.644464][T15529] bond2 (unregistering): Released all slaves [ 412.718670][ T5840] Bluetooth: hci4: command tx timeout [ 412.750003][T15529] bond3 (unregistering): Released all slaves [ 412.836275][T15529] bond4 (unregistering): Released all slaves [ 412.848909][T15529] bond5 (unregistering): Released all slaves [ 412.877123][T17918] netlink: 'syz.8.3078': attribute type 1 has an invalid length. [ 412.885090][T17918] netlink: 'syz.8.3078': attribute type 2 has an invalid length. [ 412.909315][T17923] kthread_run failed with err -4 [ 413.065854][T15529] : left promiscuous mode [ 413.217644][T17850] chnl_net:caif_netlink_parms(): no params data found [ 413.230991][T15529] tipc: Disabling bearer [ 413.245218][T15529] tipc: Disabling bearer [ 413.264141][T15529] tipc: Left network mode [ 413.643516][T17850] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.655502][T17850] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.683313][T17850] bridge_slave_0: entered allmulticast mode [ 413.694828][T17850] bridge_slave_0: entered promiscuous mode [ 413.755866][T17850] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.764173][T17850] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.783732][T17850] bridge_slave_1: entered allmulticast mode [ 413.791686][T17850] bridge_slave_1: entered promiscuous mode [ 413.842635][T17993] __nla_validate_parse: 3 callbacks suppressed [ 413.842651][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3096'. [ 413.999355][T17997] bond8: option min_links: invalid value (18446744073709551614) [ 414.007231][T17997] bond8: option min_links: allowed values 0 - 2147483647 [ 414.022604][T17997] bond8 (unregistering): Released all slaves [ 414.083663][T17850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.095037][T18007] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3101'. [ 414.111068][T18007] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3101'. [ 414.123965][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3101'. [ 414.191864][T17850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.245957][T18009] netlink: 'syz.9.3102': attribute type 1 has an invalid length. [ 414.277692][T18018] netlink: 'syz.8.3104': attribute type 1 has an invalid length. [ 414.316512][ T30] audit: type=1107 audit(1762840528.206:6): pid=18019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_1âdwŭeĔ>%]@ԯTޔhvZ^x-`%%$8iR+, priority 0 [ 416.379041][T18099] syzkaller0: entered promiscuous mode [ 416.384526][T18099] syzkaller0: entered allmulticast mode [ 416.458767][T18099] tipc: Resetting bearer [ 416.489573][T18096] tipc: Resetting bearer [ 416.518435][T18096] tipc: Disabling bearer [ 416.639515][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3132'. [ 416.865510][ T5840] Bluetooth: hci4: command tx timeout [ 416.930160][T17850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.977693][T17850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.012376][T17850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 417.031599][T17850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 417.232487][T17850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.264541][T18159] tipc: Enabling of bearer rejected, failed to enable media [ 417.334817][T17850] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.361299][T15521] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.368510][T15521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.412723][T15521] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.419946][T15521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.452559][T18169] netlink: 'syz.9.3146': attribute type 5 has an invalid length. [ 417.691974][T18169] bond0: entered promiscuous mode [ 417.697947][T18169] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 417.705776][T18169] bridge_slave_1: entered promiscuous mode [ 417.972144][T18199] vxcan2: entered allmulticast mode [ 418.154932][T17850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.772809][T18244] syzkaller0: entered promiscuous mode [ 418.803532][T18244] syzkaller0: entered allmulticast mode [ 418.865241][T18248] __nla_validate_parse: 3 callbacks suppressed [ 418.882230][T18248] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3163'. [ 418.928871][T18248] syzkaller0: entered promiscuous mode [ 418.934541][T18248] syzkaller0: entered allmulticast mode [ 418.947920][ T5840] Bluetooth: hci4: command tx timeout [ 419.252927][T18250] tipc: Resetting bearer [ 419.407490][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3171'. [ 419.667602][T18251] geneve4: entered promiscuous mode [ 419.672992][T18251] geneve4: entered allmulticast mode [ 419.727240][T18265] netlink: 'syz.7.3168': attribute type 12 has an invalid length. [ 419.747634][T15530] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.765510][T15530] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.773889][T15530] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 419.815787][T15530] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.838186][T15530] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.850377][T18278] x_tables: unsorted entry at hook 3 [ 419.855761][T15530] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 419.866151][T17850] veth0_vlan: entered promiscuous mode [ 419.886510][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3174'. [ 419.905447][T15530] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.924253][T15530] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.934622][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3174'. [ 419.962619][T15530] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 420.008779][T15530] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.034967][T15530] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.064745][T15530] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 420.133902][T18294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3177'. [ 420.183473][T17850] veth1_vlan: entered promiscuous mode [ 420.439543][T18299] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3176'. [ 421.594162][T17850] veth0_macvtap: entered promiscuous mode [ 421.617269][T17850] veth1_macvtap: entered promiscuous mode [ 421.685978][T17850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.726420][T17850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.753092][T15521] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.808511][T15521] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.860577][T15521] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.886792][T15521] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.030058][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3185'. [ 422.035819][T15527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.047114][T15527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.052032][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3185'. [ 422.098000][T18325] smc: net device hsr0 applied user defined pnetid SYZ2 [ 422.109110][T15521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.124799][T15521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.259936][T18337] netlink: 'syz.5.3053': attribute type 21 has an invalid length. [ 422.283300][T18337] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3053'. [ 422.805699][T18356] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3192'. [ 422.839713][T18359] netlink: zone id is out of range [ 422.921263][T18359] netlink: 'syz.8.3193': attribute type 3 has an invalid length. [ 423.023447][T15523] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.045739][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.054668][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.063927][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.086075][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.095430][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.180248][T15523] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.345216][T15523] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.369256][T18366] C speed is unknown, defaulting to 1000 [ 423.490730][T18386] openvswitch: netlink: EtherType 50a is less than min 600 [ 423.609205][T18391] netlink: 'syz.9.3199': attribute type 10 has an invalid length. [ 425.185466][ T5848] Bluetooth: hci0: command tx timeout [ 426.414707][T15523] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.482229][T18393] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 426.500199][T18393] __nla_validate_parse: 5 callbacks suppressed [ 426.500216][T18393] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3202'. [ 426.522006][T18366] wg1 speed is unknown, defaulting to 1000 [ 426.897247][T18419] Unsupported ieee802154 address type: 0 [ 426.963175][T15523] tipc: Disabling bearer [ 427.011390][T15523] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 427.115554][T18432] netlink: 'syz.7.3213': attribute type 10 has an invalid length. [ 427.141153][T15523] bond4 (unregistering): (slave gretap1): Releasing active interface [ 427.149377][T15523] gretap1 (unregistering): left allmulticast mode [ 427.275387][ T5848] Bluetooth: hci0: command tx timeout [ 427.606073][T15523] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 427.614182][T15523] bridge7 (unregistering): left promiscuous mode [ 427.800741][T15523] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 427.810368][T15523] bridge_slave_1: left promiscuous mode [ 427.816443][T15523] bond0 (unregistering): Released all slaves [ 427.832848][T15523] bond1 (unregistering): Released all slaves [ 427.854732][T15523] bond2 (unregistering): Released all slaves [ 427.879304][T15523] bond3 (unregistering): Released all slaves [ 427.902596][T15523] bond4 (unregistering): Released all slaves [ 428.037969][T15523] bond5 (unregistering): Released all slaves [ 428.050076][T15523] bond6 (unregistering): Released all slaves [ 428.063324][T15523] bond7 (unregistering): Released all slaves [ 428.247951][T18419] netlink: 'syz.5.3210': attribute type 12 has an invalid length. [ 428.344591][T15523] tipc: Left network mode [ 428.368980][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3215'. [ 428.398919][T18448] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3215'. [ 428.399794][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'. [ 428.421197][T18451] tc_dump_action: action bad kind [ 428.542751][T18366] chnl_net:caif_netlink_parms(): no params data found [ 429.355484][ T5848] Bluetooth: hci0: command tx timeout [ 429.779015][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3226'. [ 429.789997][T18486] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3226'. [ 430.186849][T18466] macsec1: entered promiscuous mode [ 430.259391][T18482] team_slave_0: entered promiscuous mode [ 430.265467][T18482] team_slave_1: entered promiscuous mode [ 430.281612][T18482] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 430.289158][T18482] team0: Device macvtap1 is already an upper device of the team interface [ 430.300706][T18482] team_slave_0: left promiscuous mode [ 430.306192][T18482] team_slave_1: left promiscuous mode [ 430.596059][T18366] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.622434][T18366] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.643517][T18366] bridge_slave_0: entered allmulticast mode [ 430.663178][T18366] bridge_slave_0: entered promiscuous mode [ 430.741346][T18508] veth3: entered allmulticast mode [ 430.778039][T18513] veth5: entered allmulticast mode [ 430.783631][T18366] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.793692][T18527] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3235'. [ 430.815548][T18366] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.826661][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3234'. [ 430.837327][T18366] bridge_slave_1: entered allmulticast mode [ 430.845905][T18366] bridge_slave_1: entered promiscuous mode [ 430.907629][T15523] hsr_slave_0: left promiscuous mode [ 430.914568][T15523] hsr_slave_1: left promiscuous mode [ 431.008597][T15523] pim6reg (unregistering): left allmulticast mode [ 431.099921][T18543] Cannot find add_set index 0 as target [ 431.436988][ T5848] Bluetooth: hci0: command tx timeout [ 431.574661][T18366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.603769][T18536] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3236'. [ 431.616601][T18542] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3240'. [ 431.638513][T18548] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3241'. [ 431.662330][T18366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.848289][T18366] team0: Port device team_slave_0 added [ 431.884145][T18366] team0: Port device team_slave_1 added [ 431.944765][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'. [ 431.963715][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'. [ 432.030253][T18366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.075492][T18366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.113805][T18366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.129849][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3248'. [ 432.152072][T18366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.161330][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3248'. [ 432.170832][T18366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.200859][T18366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.399842][T18585] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 432.413574][T18366] hsr_slave_0: entered promiscuous mode [ 432.439945][T18366] hsr_slave_1: entered promiscuous mode [ 432.691563][T15523] IPVS: stop unused estimator thread 0... [ 432.699068][T18598] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3253'. [ 432.953806][T18613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.997213][T18618] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 433.047683][T18621] netlink: 'syz.7.3261': attribute type 10 has an invalid length. [ 433.059087][T18621] team0: Port device dummy0 added [ 433.367290][T18641] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3267'. [ 433.486958][T18366] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.498094][T18366] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.522923][T18366] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.570850][T18649] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 433.604390][T18366] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.720575][T18665] sctp: [Deprecated]: syz.5.3272 (pid 18665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.720575][T18665] Use struct sctp_sack_info instead [ 433.769158][T18366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.793277][T18366] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.809560][T18672] netlink: 'syz.5.3274': attribute type 1 has an invalid length. [ 433.814102][T15529] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.824430][T15529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.891789][T15529] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.898969][T15529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.984539][T18674] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 434.260100][T18366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.638603][T18366] veth0_vlan: entered promiscuous mode [ 434.670478][T18694] Bluetooth: MGMT ver 1.23 [ 434.680397][T18366] veth1_vlan: entered promiscuous mode [ 434.761915][T18366] veth0_macvtap: entered promiscuous mode [ 434.771624][T18698] tipc: Invalid UDP bearer configuration [ 434.771682][T18698] tipc: Enabling of bearer rejected, failed to enable media [ 434.792889][T18697] v: renamed from vlan0 (while UP) [ 434.824095][T18366] veth1_macvtap: entered promiscuous mode [ 434.838602][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3282'. [ 434.849392][T18366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.895028][T18366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.937161][T15523] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.959731][T15523] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.004436][T15523] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.034888][T15523] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.148373][T18709] tipc: Started in network mode [ 435.153287][T18709] tipc: Node identity 1692e392ea45, cluster identity 4711 [ 435.175919][T18709] tipc: Enabled bearer , priority 0 [ 435.193748][T18709] syzkaller0: entered promiscuous mode [ 435.200796][T18709] syzkaller0: entered allmulticast mode [ 435.260685][T18709] tipc: Resetting bearer [ 435.277397][T18708] tipc: Resetting bearer [ 435.308185][T18708] tipc: Disabling bearer [ 435.395091][T15529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.413567][T15529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.474643][T15521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.482882][T15521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.504016][T18726] tipc: Started in network mode [ 435.515177][T18726] tipc: Node identity fab8e4062d12, cluster identity 4711 [ 435.528200][T18726] tipc: Enabled bearer , priority 0 [ 435.541256][T18726] syzkaller0: entered promiscuous mode [ 435.547664][T18726] syzkaller0: entered allmulticast mode [ 435.556801][T18726] netlink: zone id is out of range [ 435.561935][T18726] netlink: zone id is out of range [ 435.572106][T18726] netlink: zone id is out of range [ 435.581010][T18726] netlink: zone id is out of range [ 435.589410][T18726] netlink: zone id is out of range [ 435.594627][T18726] netlink: zone id is out of range [ 435.599975][T18726] netlink: zone id is out of range [ 435.605137][T18726] netlink: zone id is out of range [ 435.632317][T18733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.661064][T18744] netlink: 'syz.6.3189': attribute type 4 has an invalid length. [ 435.680658][T18726] netlink: zone id is out of range [ 435.790315][T18726] tipc: Resetting bearer [ 435.847729][T18725] tipc: Resetting bearer [ 435.878300][T18754] netlink: 'syz.9.3301': attribute type 7 has an invalid length. [ 435.879236][T18753] sctp: [Deprecated]: syz.6.3299 (pid 18753) Use of int in maxseg socket option. [ 435.879236][T18753] Use struct sctp_assoc_value instead [ 435.928832][T18754] netlink: 'syz.9.3301': attribute type 8 has an invalid length. [ 435.996022][T18725] tipc: Disabling bearer [ 436.084637][T18759] netlink: 'syz.5.3302': attribute type 1 has an invalid length. [ 436.585160][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.618607][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.649355][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.657503][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.665211][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.805744][T18781] C speed is unknown, defaulting to 1000 [ 436.895632][T18793] ipt_REJECT: TCP_RESET invalid for non-tcp [ 436.929065][T18795] __nla_validate_parse: 9 callbacks suppressed [ 436.929081][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3315'. [ 436.956412][T18798] netlink: 'syz.9.3314': attribute type 2 has an invalid length. [ 436.984856][T18798] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3314'. [ 437.080612][T18800] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3316'. [ 437.156180][T18804] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3317'. [ 437.336329][T18820] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3321'. [ 437.340175][T18811] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3319'. [ 437.377556][T18781] wg1 speed is unknown, defaulting to 1000 [ 437.541239][T18829] veth0: entered promiscuous mode [ 437.555625][T18832] netlink: 'syz.9.3322': attribute type 4 has an invalid length. [ 437.628382][T18828] veth0: left promiscuous mode [ 437.902843][T18781] chnl_net:caif_netlink_parms(): no params data found [ 437.915900][T18844] netlink: 'syz.6.3327': attribute type 5 has an invalid length. [ 438.137264][T18868] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3330'. [ 438.212218][T18781] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.228890][T18781] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.238656][T18873] netlink: 644 bytes leftover after parsing attributes in process `syz.6.3331'. [ 438.258492][T18781] bridge_slave_0: entered allmulticast mode [ 438.280410][T18781] bridge_slave_0: entered promiscuous mode [ 438.299980][T18781] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.318011][T18781] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.336554][T18781] bridge_slave_1: entered allmulticast mode [ 438.351135][T18781] bridge_slave_1: entered promiscuous mode [ 438.489665][T18781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.512774][T18781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.669489][T18907] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001 [ 438.671104][T18781] team0: Port device team_slave_0 added [ 438.698388][T18781] team0: Port device team_slave_1 added [ 438.707829][ T5840] Bluetooth: hci1: command tx timeout [ 438.782515][T18912] gretap0: entered allmulticast mode [ 438.815038][T18781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.841182][T18781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.914225][T18781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.940990][T18781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.959261][T18781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.989228][T18781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.159888][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3343'. [ 439.213658][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3347'. [ 439.247929][T18945] netlink: 'syz.6.3347': attribute type 84 has an invalid length. [ 439.269808][T18781] hsr_slave_0: entered promiscuous mode [ 439.276673][T18781] hsr_slave_1: entered promiscuous mode [ 439.283093][T18781] debugfs: 'hsr0' already exists in 'hsr' [ 439.292762][T18781] Cannot create hsr debugfs directory [ 439.582519][T18965] net_ratelimit: 8 callbacks suppressed [ 439.582536][T18965] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 439.827500][T18982] netlink: 'syz.9.3356': attribute type 21 has an invalid length. [ 440.001797][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.141643][T18781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.167484][T18781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.191886][T18781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.211035][T18781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.327853][T19012] tipc: New replicast peer: 255.255.255.255 [ 440.345817][T19012] tipc: Enabled bearer , priority 10 [ 440.383121][ T30] audit: type=1804 audit(1762840554.276:7): pid=19014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3367" name="/newroot/23/cgroup.controllers" dev="tmpfs" ino=134 res=1 errno=0 [ 440.466325][ T30] audit: type=1800 audit(1762840554.276:8): pid=19014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3367" name="cgroup.controllers" dev="tmpfs" ino=134 res=0 errno=0 [ 440.504719][T19014] bond1 (unregistering): Released all slaves [ 440.649687][T18781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.690222][T18781] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.713847][T15522] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.721057][T15522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.773093][T15527] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.780317][T15527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.788522][ T5840] Bluetooth: hci1: command tx timeout [ 440.849562][T18781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.861997][T19025] openvswitch: netlink: ufid size 676 bytes exceeds the range (1, 16) [ 440.878040][T19025] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 440.963525][T19028] lo: entered promiscuous mode [ 440.977923][T19028] netlink: 'syz.5.3372': attribute type 2 has an invalid length. [ 441.036276][T19028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.264955][T18781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.465491][ T7718] tipc: Node number set to 3618300934 [ 441.669699][T19065] netlink: 'syz.5.3380': attribute type 10 has an invalid length. [ 442.003154][T19065] team0: Port device geneve0 added [ 442.205695][T18781] veth0_vlan: entered promiscuous mode [ 442.254866][T18781] veth1_vlan: entered promiscuous mode [ 442.338419][T19092] tipc: Started in network mode [ 442.393610][T19092] tipc: Node identity 1e45e2cf844c, cluster identity 4711 [ 442.415518][T19095] netlink: 'syz.8.3387': attribute type 1 has an invalid length. [ 442.419629][T19092] tipc: Enabled bearer , priority 0 [ 442.516915][T19093] syzkaller0: entered promiscuous mode [ 442.522423][T19093] syzkaller0: entered allmulticast mode [ 442.564882][T19092] tipc: Resetting bearer [ 442.588218][T19095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.621612][T19095] tipc: Enabled bearer , priority 0 [ 442.643925][T19091] tipc: Resetting bearer [ 442.704198][T19091] tipc: Disabling bearer [ 442.733793][T19095] syzkaller0: entered promiscuous mode [ 442.742781][T19095] syzkaller0: entered allmulticast mode [ 442.841790][T19095] tipc: Resetting bearer [ 442.853978][T19094] tipc: Resetting bearer [ 442.868855][ T5840] Bluetooth: hci1: command tx timeout [ 442.911991][T19094] tipc: Disabling bearer [ 442.944641][T18781] veth0_macvtap: entered promiscuous mode [ 443.008578][T18781] veth1_macvtap: entered promiscuous mode [ 443.058566][T18781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.092927][T18781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.117237][T19128] __nla_validate_parse: 7 callbacks suppressed [ 443.117254][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3394'. [ 443.194295][T15522] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.239885][T15522] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.257716][T15522] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.304743][T15522] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.330009][T19143] team0: Device ip6gre1 is of different type [ 443.386006][T19140] syzkaller0: entered promiscuous mode [ 443.391738][T19140] syzkaller0: entered allmulticast mode [ 443.404805][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3399'. [ 443.424480][T19145] openvswitch: netlink: Missing key (keys=40, expected=80) [ 443.673587][T15527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.693656][T15527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.731040][T15529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.746678][T15529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.802846][T19164] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3404'. [ 443.947792][T19173] pim6reg1: entered promiscuous mode [ 443.953138][T19173] pim6reg1: entered allmulticast mode [ 444.428447][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3411'. [ 444.545870][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.558312][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.568863][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.578450][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.590084][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.703420][T19202] C speed is unknown, defaulting to 1000 [ 444.851616][T19205] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3412'. [ 444.900334][T15526] bond0: (slave netdevsim0): Releasing backup interface [ 444.910162][T15526] netdevsim netdevsim9 netdevsim0 (unregistering): left promiscuous mode [ 444.934882][T19205] netem: unknown loss type 0 [ 444.941851][T19205] netem: change failed [ 444.949667][ T5848] Bluetooth: hci1: command tx timeout [ 445.001268][T19202] wg1 speed is unknown, defaulting to 1000 [ 445.058188][T19207] bond2: option lp_interval: invalid value (0) [ 445.064463][T19207] bond2: option lp_interval: allowed values 1 - 2147483647 [ 445.079407][T19207] bond2 (unregistering): Released all slaves [ 445.154924][T19218] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3417'. [ 445.164252][T19218] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3417'. [ 445.175589][T19218] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3417'. [ 445.196059][T19216] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3416'. [ 445.208890][T19213] tipc: Started in network mode [ 445.215879][T19213] tipc: Node identity 5a45abf40aca, cluster identity 4711 [ 445.223244][T19213] tipc: Enabled bearer , priority 0 [ 445.259573][T19215] syzkaller0: entered promiscuous mode [ 445.268614][T19215] syzkaller0: entered allmulticast mode [ 445.337259][T19224] xt_socket: unknown flags 0x50 [ 445.384000][T19213] tipc: Resetting bearer [ 445.415969][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3420'. [ 445.538300][T19212] tipc: Resetting bearer [ 445.560108][T19212] tipc: Disabling bearer [ 445.698364][T15526] veth15: left allmulticast mode [ 445.703362][T15526] veth15: left promiscuous mode [ 445.708734][T15526] bridge4: port 2(veth15) entered disabled state [ 445.720480][T15526] veth13: left allmulticast mode [ 445.749869][T15526] veth13: left promiscuous mode [ 445.754986][T15526] bridge4: port 1(veth13) entered disabled state [ 446.029238][T15526] dvmrp0 (unregistering): left allmulticast mode [ 446.329377][T15526] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 446.340144][T15526] bridge_slave_1: left promiscuous mode [ 446.347410][T15526] bond0 (unregistering): Released all slaves [ 446.441959][T15526] bond1 (unregistering): (slave veth3): Releasing active interface [ 446.454746][T15526] bond1 (unregistering): (slave veth5): Releasing active interface [ 446.464041][T15526] bond1 (unregistering): Released all slaves [ 446.477325][T15526] bond2 (unregistering): Released all slaves [ 446.489890][T15526] bond3 (unregistering): Released all slaves [ 446.587347][T15526] bond4 (unregistering): Released all slaves [ 446.599513][T15526] bond5 (unregistering): Released all slaves [ 446.611869][T15526] bond6 (unregistering): Released all slaves [ 446.624418][T15526] bond7 (unregistering): Released all slaves [ 446.626676][ T5848] Bluetooth: hci2: command tx timeout [ 446.677483][T19246] batadv_slave_0: entered allmulticast mode [ 446.683695][T19248] netem: change failed [ 446.695174][T19251] batadv_slave_0: left allmulticast mode [ 446.749407][T19263] bridge1: entered promiscuous mode [ 446.754667][T19263] bridge1: entered allmulticast mode [ 446.798203][T19263] team0: Port device bridge1 added [ 446.943489][T19270] bond2: option resend_igmp: invalid value (32767) [ 446.951740][T19270] bond2: option resend_igmp: allowed values 0 - 255 [ 446.961101][T19270] bond2 (unregistering): Released all slaves [ 446.978489][T15526] tipc: Left network mode [ 447.007927][T19277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.033006][T19202] chnl_net:caif_netlink_parms(): no params data found [ 447.481030][T19312] netlink: 'syz.5.3439': attribute type 1 has an invalid length. [ 447.580965][T19202] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.606090][T19202] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.619176][T19202] bridge_slave_0: entered allmulticast mode [ 447.649626][T19202] bridge_slave_0: entered promiscuous mode [ 447.690116][T19202] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.708394][T19202] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.724629][T19202] bridge_slave_1: entered allmulticast mode [ 447.755900][T19202] bridge_slave_1: entered promiscuous mode [ 447.842617][T19325] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 447.940576][T19202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.975899][T15526] hsr_slave_0: left promiscuous mode [ 447.982187][T15526] hsr_slave_1: left promiscuous mode [ 448.347257][T19333] __nla_validate_parse: 3 callbacks suppressed [ 448.347275][T19333] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3444'. [ 448.706802][ T5848] Bluetooth: hci2: command tx timeout [ 449.048616][T19202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.277720][T19202] team0: Port device team_slave_0 added [ 449.286739][T19202] team0: Port device team_slave_1 added [ 449.362761][T19362] tc_dump_action: action bad kind [ 449.428250][T19202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.453518][T19202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.480780][T19202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.509449][T19362] ipvlan2: entered promiscuous mode [ 449.531944][T19202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.565657][T19202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.612963][T19380] netlink: 'syz.6.3460': attribute type 11 has an invalid length. [ 449.619343][T19202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.691870][T15526] IPVS: stop unused estimator thread 0... [ 449.899610][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3465'. [ 449.919858][T19391] bond1: option all_slaves_active: invalid value (222) [ 449.929253][T19391] bond1 (unregistering): Released all slaves [ 449.958134][T19202] hsr_slave_0: entered promiscuous mode [ 449.965225][T19202] hsr_slave_1: entered promiscuous mode [ 449.972297][T19202] debugfs: 'hsr0' already exists in 'hsr' [ 449.972963][T19404] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3465'. [ 449.979039][T19202] Cannot create hsr debugfs directory [ 450.129437][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3466'. [ 450.138846][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3466'. [ 450.196234][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3469'. [ 450.246972][T19414] syzkaller0: entered promiscuous mode [ 450.262421][T19414] syzkaller0: entered allmulticast mode [ 450.361200][T19425] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3471'. [ 450.375766][T19426] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3471'. [ 450.785628][ T5848] Bluetooth: hci2: command tx timeout [ 450.793403][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.803121][T19440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.927915][T19459] xt_CONNSECMARK: invalid mode: 0 [ 450.952283][ T7719] IPVS: starting estimator thread 0... [ 451.045365][T19461] IPVS: using max 34 ests per chain, 81600 per kthread [ 451.067438][T19202] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 451.082286][T19202] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 451.097196][T19202] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 451.107791][T19202] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 451.234745][T19202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.263460][T19202] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.281080][T15526] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.288278][T15526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.306257][T15526] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.313421][T15526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.387235][T19202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.456526][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.607298][T19488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.659076][T19488] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 451.709805][T19488] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 451.888493][T19202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.948916][T19508] netlink: 'syz.8.3493': attribute type 83 has an invalid length. [ 452.167684][T19523] netlink: 212 bytes leftover after parsing attributes in process `syz.7.3497'. [ 452.218962][T19529] tipc: MTU too low for tipc bearer [ 452.227720][T19524] openvswitch: netlink: Actions may not be safe on all matching packets [ 452.341471][T19527] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 452.491969][T19547] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 452.518722][T19548] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 452.531434][T19202] veth0_vlan: entered promiscuous mode [ 452.567238][T19202] veth1_vlan: entered promiscuous mode [ 452.607033][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3505'. [ 452.641013][T19202] veth0_macvtap: entered promiscuous mode [ 452.760970][T19557] C speed is unknown, defaulting to 1000 [ 452.761815][T19202] veth1_macvtap: entered promiscuous mode [ 452.840519][T19202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.864455][T19202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.874059][ T5840] Bluetooth: hci2: command tx timeout [ 452.914905][T15531] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.997139][T15526] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.018321][T15526] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.047498][T15526] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.230691][T15527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.243088][T15527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.399537][T15531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.413707][T19594] openvswitch: netlink: Unknown key attributes 2 [ 453.416868][T15531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.523889][T19598] __nla_validate_parse: 1 callbacks suppressed [ 453.523905][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3520'. [ 453.642084][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3406'. [ 453.674105][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3406'. [ 453.849344][T19614] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 454.044835][T19628] xfrm1: entered allmulticast mode [ 454.172981][T19638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.263973][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3535'. [ 454.398377][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3537'. [ 454.479320][T19654] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3539'. [ 454.495829][T19654] netlink: 380 bytes leftover after parsing attributes in process `syz.6.3539'. [ 454.809739][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3548'. [ 454.850303][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3548'. [ 454.962463][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 454.978474][T15526] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.005528][T15526] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.065169][T15526] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.133805][T15526] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.355828][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.366992][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.377343][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.387693][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.397956][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.408211][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.418484][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.428829][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.439446][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 455.558648][T19723] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3558'. [ 455.612271][T19724] syzkaller0: entered promiscuous mode [ 455.635418][T19724] syzkaller0: entered allmulticast mode [ 455.794952][T19732] x_tables: duplicate entry at hook 1 [ 456.004407][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.022211][T19747] [ 456.024568][T19747] ====================================================== [ 456.031586][T19747] WARNING: possible circular locking dependency detected [ 456.038618][T19747] syzkaller #0 Not tainted [ 456.043030][T19747] ------------------------------------------------------ [ 456.050045][T19747] syz.6.3566/19747 is trying to acquire lock: [ 456.056105][T19747] ffff88806dbf7a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 456.068285][T19747] [ 456.068285][T19747] but task is already holding lock: [ 456.075635][T19747] ffff88805a12a558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 456.085558][T19747] [ 456.085558][T19747] which lock already depends on the new lock. [ 456.085558][T19747] [ 456.095937][T19747] [ 456.095937][T19747] the existing dependency chain (in reverse order) is: [ 456.104925][T19747] [ 456.104925][T19747] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 456.113248][T19747] lock_acquire+0x120/0x360 [ 456.118269][T19747] _raw_spin_lock+0x2e/0x40 [ 456.123295][T19747] sch_direct_xmit+0x153/0x4b0 [ 456.128650][T19747] __dev_queue_xmit+0x1857/0x3b50 [ 456.134186][T19747] ip6_finish_output2+0xfb3/0x1480 [ 456.139845][T19747] ip6_output+0x340/0x550 [ 456.144720][T19747] NF_HOOK+0x9e/0x380 [ 456.149241][T19747] mld_sendpack+0x8d4/0xe60 [ 456.154258][T19747] mld_ifc_work+0x83e/0xd60 [ 456.159273][T19747] process_scheduled_works+0xae1/0x17b0 [ 456.165336][T19747] worker_thread+0x8a0/0xda0 [ 456.170465][T19747] kthread+0x711/0x8a0 [ 456.175045][T19747] ret_from_fork+0x4bc/0x870 [ 456.180139][T19747] ret_from_fork_asm+0x1a/0x30 [ 456.185413][T19747] [ 456.185413][T19747] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 456.195747][T19747] validate_chain+0xb9b/0x2140 [ 456.201023][T19747] __lock_acquire+0xab9/0xd20 [ 456.206197][T19747] lock_acquire+0x120/0x360 [ 456.211197][T19747] _raw_spin_lock+0x2e/0x40 [ 456.216202][T19747] __dev_queue_xmit+0x22b7/0x3b50 [ 456.221729][T19747] ip6_finish_output2+0xfb3/0x1480 [ 456.227347][T19747] ip6_output+0x340/0x550 [ 456.232189][T19747] ndisc_send_skb+0xbce/0x1510 [ 456.237472][T19747] ndisc_solicit+0x444/0x610 [ 456.242561][T19747] __neigh_event_send+0xf70/0x1560 [ 456.248189][T19747] neigh_resolve_output+0x198/0x750 [ 456.253911][T19747] ip6_finish_output2+0xfb3/0x1480 [ 456.259561][T19747] ip6_output+0x340/0x550 [ 456.264499][T19747] ip6_send_skb+0x1d5/0x390 [ 456.269515][T19747] icmp6_send+0x12c6/0x1940 [ 456.274532][T19747] ip6_link_failure+0x3b/0x4c0 [ 456.279803][T19747] ip_tunnel_xmit+0x175b/0x2390 [ 456.285253][T19747] __gre_xmit+0x19a/0x240 [ 456.290113][T19747] erspan_xmit+0xa04/0x1220 [ 456.295226][T19747] dev_hard_start_xmit+0x2d7/0x830 [ 456.300848][T19747] sch_direct_xmit+0x241/0x4b0 [ 456.306122][T19747] __qdisc_run+0xb16/0x15f0 [ 456.311130][T19747] __dev_queue_xmit+0x1056/0x3b50 [ 456.316661][T19747] ip6_finish_output2+0xfb3/0x1480 [ 456.322422][T19747] ip6_output+0x340/0x550 [ 456.327258][T19747] ip6_mr_output+0x4e9/0x1100 [ 456.332441][T19747] rawv6_send_hdrinc+0xe16/0x17a0 [ 456.337980][T19747] rawv6_sendmsg+0x12ee/0x1830 [ 456.343250][T19747] __sock_sendmsg+0x19c/0x270 [ 456.348431][T19747] ____sys_sendmsg+0x505/0x830 [ 456.353709][T19747] ___sys_sendmsg+0x21f/0x2a0 [ 456.358893][T19747] __x64_sys_sendmsg+0x19b/0x260 [ 456.364351][T19747] do_syscall_64+0xfa/0xfa0 [ 456.369370][T19747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.375777][T19747] [ 456.375777][T19747] other info that might help us debug this: [ 456.375777][T19747] [ 456.385997][T19747] Possible unsafe locking scenario: [ 456.385997][T19747] [ 456.393431][T19747] CPU0 CPU1 [ 456.398801][T19747] ---- ---- [ 456.404158][T19747] lock(&qdisc_xmit_lock_key#4); [ 456.409174][T19747] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 456.418882][T19747] lock(&qdisc_xmit_lock_key#4); [ 456.426431][T19747] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 456.433538][T19747] [ 456.433538][T19747] *** DEADLOCK *** [ 456.433538][T19747] [ 456.441686][T19747] 12 locks held by syz.6.3566/19747: [ 456.446955][T19747] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 456.456788][T19747] #1: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 456.466182][T19747] #2: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 456.475237][T19747] #3: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 456.485165][T19747] #4: ffff88805a12a558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 456.495477][T19747] #5: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 456.504697][T19747] #6: ffff88802f290a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 456.514102][T19747] #7: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 456.523335][T19747] #8: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 456.532373][T19747] #9: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 456.541851][T19747] #10: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 456.551159][T19747] #11: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 456.561171][T19747] [ 456.561171][T19747] stack backtrace: [ 456.567086][T19747] CPU: 1 UID: 0 PID: 19747 Comm: syz.6.3566 Not tainted syzkaller #0 PREEMPT(full) [ 456.567107][T19747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.567116][T19747] Call Trace: [ 456.567122][T19747] [ 456.567128][T19747] dump_stack_lvl+0x189/0x250 [ 456.567150][T19747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.567167][T19747] ? __pfx__printk+0x10/0x10 [ 456.567182][T19747] ? print_lock_name+0xde/0x100 [ 456.567196][T19747] print_circular_bug+0x2ee/0x310 [ 456.567214][T19747] check_noncircular+0x134/0x160 [ 456.567232][T19747] validate_chain+0xb9b/0x2140 [ 456.567254][T19747] __lock_acquire+0xab9/0xd20 [ 456.567269][T19747] ? __dev_queue_xmit+0x22b7/0x3b50 [ 456.567284][T19747] lock_acquire+0x120/0x360 [ 456.567296][T19747] ? __dev_queue_xmit+0x22b7/0x3b50 [ 456.567312][T19747] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 456.567329][T19747] ? check_noncircular+0xe0/0x160 [ 456.567346][T19747] _raw_spin_lock+0x2e/0x40 [ 456.567362][T19747] ? __dev_queue_xmit+0x22b7/0x3b50 [ 456.567376][T19747] __dev_queue_xmit+0x22b7/0x3b50 [ 456.567394][T19747] ? __dev_queue_xmit+0x27b/0x3b50 [ 456.567412][T19747] ? neigh_resolve_output+0x438/0x750 [ 456.567431][T19747] ? __pfx___dev_queue_xmit+0x10/0x10 [ 456.567446][T19747] ? read_seqbegin+0x122/0x250 [ 456.567462][T19747] ? neigh_resolve_output+0x438/0x750 [ 456.567479][T19747] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.567497][T19747] ? read_seqbegin+0x1ac/0x250 [ 456.567514][T19747] ? __pfx_read_seqbegin+0x10/0x10 [ 456.567530][T19747] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.567544][T19747] ? eth_header+0x11b/0x200 [ 456.567559][T19747] ? __asan_memcpy+0x40/0x70 [ 456.567584][T19747] ip6_finish_output2+0xfb3/0x1480 [ 456.567608][T19747] ? __pfx_ip6_finish_output2+0x10/0x10 [ 456.567627][T19747] ? ip6_mtu+0x7d/0x490 [ 456.567642][T19747] ? ip6_mtu+0x38c/0x490 [ 456.567658][T19747] ? ip6_finish_output+0x2ef/0x4e0 [ 456.567674][T19747] ? ip6_output+0x126/0x550 [ 456.567690][T19747] ip6_output+0x340/0x550 [ 456.567707][T19747] ndisc_send_skb+0xbce/0x1510 [ 456.567723][T19747] ? ndisc_send_skb+0x1e4/0x1510 [ 456.567739][T19747] ? __pfx_ndisc_send_skb+0x10/0x10 [ 456.567753][T19747] ? __pfx_dst_output+0x10/0x10 [ 456.567770][T19747] ? ipv6_get_lladdr+0x2b/0x3f0 [ 456.567782][T19747] ? ipv6_get_lladdr+0x2b/0x3f0 [ 456.567794][T19747] ? ipv6_get_lladdr+0x2b/0x3f0 [ 456.567806][T19747] ? ipv6_get_lladdr+0x378/0x3f0 [ 456.567819][T19747] ? ipv6_get_lladdr+0x2b/0x3f0 [ 456.567832][T19747] ndisc_solicit+0x444/0x610 [ 456.567855][T19747] ? __pfx_ndisc_solicit+0x10/0x10 [ 456.567871][T19747] ? __neigh_event_send+0xf08/0x1560 [ 456.567890][T19747] ? __pfx_ndisc_solicit+0x10/0x10 [ 456.567904][T19747] __neigh_event_send+0xf70/0x1560 [ 456.567924][T19747] ? ___neigh_create+0x1c83/0x2260 [ 456.567942][T19747] neigh_resolve_output+0x198/0x750 [ 456.567965][T19747] ip6_finish_output2+0xfb3/0x1480 [ 456.567988][T19747] ? __pfx_ip6_finish_output2+0x10/0x10 [ 456.568007][T19747] ? ip6_mtu+0x7d/0x490 [ 456.568022][T19747] ? ip6_mtu+0x38c/0x490 [ 456.568038][T19747] ? ip6_finish_output+0x2ef/0x4e0 [ 456.568054][T19747] ? ip6_output+0x126/0x550 [ 456.568070][T19747] ip6_output+0x340/0x550 [ 456.568086][T19747] ? ip6_send_skb+0x10f/0x390 [ 456.568105][T19747] ip6_send_skb+0x1d5/0x390 [ 456.568124][T19747] icmp6_send+0x12c6/0x1940 [ 456.568139][T19747] ? icmp6_send+0x1e9/0x1940 [ 456.568158][T19747] ? __pfx_icmp6_send+0x10/0x10 [ 456.568170][T19747] ? __lock_acquire+0xab9/0xd20 [ 456.568189][T19747] ? ip6_neigh_lookup+0x14e/0x470 [ 456.568204][T19747] ? ip6_neigh_lookup+0x14e/0x470 [ 456.568217][T19747] ? ip6_neigh_lookup+0x397/0x470 [ 456.568230][T19747] ? ip6_neigh_lookup+0x14e/0x470 [ 456.568244][T19747] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 456.568259][T19747] ip6_link_failure+0x3b/0x4c0 [ 456.568276][T19747] ip_tunnel_xmit+0x175b/0x2390 [ 456.568295][T19747] ? desc_read+0x1b8/0x3f0 [ 456.568309][T19747] ? ip_tunnel_xmit+0x80/0x2390 [ 456.568328][T19747] ? _prb_read_valid+0xa07/0xa90 [ 456.568342][T19747] ? console_flush_all+0x13a/0xb10 [ 456.568360][T19747] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 456.568378][T19747] ? gre_build_header+0x31c/0xa40 [ 456.568397][T19747] ? __pfx_gre_build_header+0x10/0x10 [ 456.568413][T19747] ? __console_unlock+0x14c/0x1a0 [ 456.568428][T19747] ? __pfx___console_unlock+0x10/0x10 [ 456.568444][T19747] ? __pfx_skb_network_protocol+0x10/0x10 [ 456.568460][T19747] __gre_xmit+0x19a/0x240 [ 456.568477][T19747] ? __pfx___gre_xmit+0x10/0x10 [ 456.568493][T19747] ? __asan_memset+0x22/0x50 [ 456.568509][T19747] ? erspan_build_header+0x19c/0x370 [ 456.568528][T19747] erspan_xmit+0xa04/0x1220 [ 456.568549][T19747] ? __pfx_erspan_xmit+0x10/0x10 [ 456.568565][T19747] ? __lock_acquire+0xab9/0xd20 [ 456.568580][T19747] dev_hard_start_xmit+0x2d7/0x830 [ 456.568601][T19747] sch_direct_xmit+0x241/0x4b0 [ 456.568620][T19747] ? __pfx_sch_direct_xmit+0x10/0x10 [ 456.568640][T19747] __qdisc_run+0xb16/0x15f0 [ 456.568657][T19747] ? __dev_queue_xmit+0xd31/0x3b50 [ 456.568676][T19747] __dev_queue_xmit+0x1056/0x3b50 [ 456.568691][T19747] ? register_lock_class+0x51/0x320 [ 456.568706][T19747] ? __dev_queue_xmit+0x27b/0x3b50 [ 456.568726][T19747] ? __pfx___dev_queue_xmit+0x10/0x10 [ 456.568740][T19747] ? read_seqbegin+0x122/0x250 [ 456.568756][T19747] ? neigh_resolve_output+0x438/0x750 [ 456.568773][T19747] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.568791][T19747] ? read_seqbegin+0x1ac/0x250 [ 456.568807][T19747] ? __pfx_read_seqbegin+0x10/0x10 [ 456.568824][T19747] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.568837][T19747] ? eth_header+0x11b/0x200 [ 456.568854][T19747] ? __asan_memcpy+0x40/0x70 [ 456.568878][T19747] ip6_finish_output2+0xfb3/0x1480 [ 456.568900][T19747] ? __pfx_ip6_finish_output2+0x10/0x10 [ 456.568919][T19747] ? ip6_mtu+0x7d/0x490 [ 456.568934][T19747] ? ip6_mtu+0x38c/0x490 [ 456.568950][T19747] ? ip6_finish_output+0x2ef/0x4e0 [ 456.568966][T19747] ? ip6_output+0x126/0x550 [ 456.568982][T19747] ip6_output+0x340/0x550 [ 456.568999][T19747] ip6_mr_output+0x4e9/0x1100 [ 456.569019][T19747] ? ip6_mr_output+0x1ca/0x1100 [ 456.569038][T19747] ? __pfx_ip6_mr_output+0x10/0x10 [ 456.569060][T19747] ? ip6t_do_table+0x1db/0x1560 [ 456.569078][T19747] ? __pfx_ip6t_do_table+0x10/0x10 [ 456.569101][T19747] ? skb_dst+0x4f/0xd0 [ 456.569114][T19747] ? dst_output+0x17b/0x1c0 [ 456.569127][T19747] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 456.569141][T19747] rawv6_send_hdrinc+0xe16/0x17a0 [ 456.569160][T19747] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 456.569173][T19747] ? txopt_get+0x335/0x3f0 [ 456.569186][T19747] ? __pfx_dst_output+0x10/0x10 [ 456.569198][T19747] ? __pfx_txopt_get+0x10/0x10 [ 456.569214][T19747] rawv6_sendmsg+0x12ee/0x1830 [ 456.569232][T19747] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 456.569252][T19747] ? __pfx_aa_sk_perm+0x10/0x10 [ 456.569271][T19747] ? sock_rps_record_flow+0x19/0x410 [ 456.569291][T19747] ? inet_sendmsg+0x2f4/0x370 [ 456.569302][T19747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.569317][T19747] __sock_sendmsg+0x19c/0x270 [ 456.569335][T19747] ____sys_sendmsg+0x505/0x830 [ 456.569351][T19747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.569367][T19747] ? import_iovec+0x74/0xa0 [ 456.569385][T19747] ___sys_sendmsg+0x21f/0x2a0 [ 456.569399][T19747] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.569424][T19747] ? __fget_files+0x2a/0x420 [ 456.569436][T19747] ? __fget_files+0x3a0/0x420 [ 456.569451][T19747] __x64_sys_sendmsg+0x19b/0x260 [ 456.569466][T19747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.569485][T19747] ? do_syscall_64+0xbe/0xfa0 [ 456.569504][T19747] do_syscall_64+0xfa/0xfa0 [ 456.569520][T19747] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.569537][T19747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.569550][T19747] ? clear_bhb_loop+0x60/0xb0 [ 456.569565][T19747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.569578][T19747] RIP: 0033:0x7f809278f6c9 [ 456.569591][T19747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.569603][T19747] RSP: 002b:00007f80936e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.569619][T19747] RAX: ffffffffffffffda RBX: 00007f80929e5fa0 RCX: 00007f809278f6c9 [ 456.569629][T19747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 456.569638][T19747] RBP: 00007f8092811f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.569646][T19747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.569655][T19747] R13: 00007f80929e6038 R14: 00007f80929e5fa0 R15: 00007ffcc88fe0b8 [ 456.569671][T19747] [ 456.598215][T19750] openvswitch: netlink: Missing key (keys=40, expected=100) [ 456.600214][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.878525][T19769] netlink: 'syz.5.3569': attribute type 10 has an invalid length. [ 457.025486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.065475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog